The Inner Circle

Weekly Cloud and Security Watch Newsletter - October 19th to 25th, 2020

________________________________________
Full newsletter with links ⇒ CloudSecurityAlliance.fr/go/KAP/
________________________________________

1 - CSA News and Updates - October 19th to 25th, 2020

• Fill in the new CSA survey on Cloud Adoption in 2020
• Publication: 'Mitigating Hybrid Clouds Risks'
• Publication: 'Cloud Controls Matrix v3.0.1 ISO Reverse Mapping'

2 - Cloud and Security News Watch (over 60 links)

• Must read
  • New CloudSecDocs.com repository site by Marco Lancini
• Attacks, Incidents, Leaks, Threats, Vulnerabilities, Outages
  • Attacks: Teams' Phishing (Threatpost) • Slack Abuse to Target O365 (Avanan) • Office 365 OAuth (KnowBe4)
  • Leaks: Patient Data on Unsecured Cloud Storage
  • Threats: Gathering Azure Passwords
• Reports, Surveys, Studies, Publications
  • Reports: Remote Work and SaaS (AppOmni) • 'Cloud Identity & Access Management' (Divvy Cloud)
  • Surveys: Exploitation des services Cloud par les cyber-attaquants (Kaspersky)
  • Studies: 'SaaS Security & Management Survey' (AppOmni) • Microsoft Office 365 IT Security Policy Usages (CoreView)
• Cloud Services Providers, Solutions, and Tools
  • AWS: Incident Response Automation • AWS PrivateLink Malicious Usage • Over 100 millions IP Addresses for Amazon
  • Azure: Playbooks & Watchlists with Sentinel
  • GCP: Huge List of Resources Liste de ressources • Graceful Shutdowns on Cloud Run • Certification Authority
  • Kubernetes: Log Management Tools • Threat Detection • Threat Vectors
  • Containers: Security Level Comparison with VMs (Intezer) • Image Management (Anchore and Ant Group)
  • Microservices: Securing Microservices Architecture
• Podcasts, Weekly 'Cloud and Security' Watch
  • Newsletters: TL;DR Security #57 • The Cloud Security Reading List #60
• Miscellaneous
  • 'SaaS Hunting' (Obsidian Security) • Threat Hunting in the Cloud, Threat Intelligence (Checkpoint Software)

3 - Agenda

• October 26th/29th → AWS: AWS Cloud Security Week 2020
• November 3rd/5th → CSA: EMEA Summit
• November 23rd/25th → CCSK / CCSK Plus training in French

4 - Link

• ⇒ CloudSecurityAlliance.fr/go/KAP/

________________________________________

________________________________________
#Veille #Watch
________________________________________

------------------------------
Olivier Caleff - CSA French Chapter - Chapter Leader - [email protected] - https://CloudSecurityAlliance.fr
------------------------------