corpus.blog
41554 blogs · [ { "id": "01a0d300-59bf-7066-9089-f152bf7f59fa", "title": "No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/", "published_at": "2026-09-17T20:53:02+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152c0fdae34", "title": "Kat Traxler - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/author/kat/", "published_at": "2026-09-04T22:05:09+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb47ccef015", "title": "The Docs Say It's OK: When Documentation Replaces a Fix in Vertex AI", "url": "https://kattraxler.cloud/the-docs-say-its-ok-when-documentation-replaces-a-fix-in-vertex-ai/", "published_at": "2026-09-02T02:42:40+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb47d0d1d04", "title": "The Two Mitigations for the Service-Account Confused Deputy in the Cloud", "url": "https://kattraxler.cloud/the-two-mitigations-for-the-service-account-confused-deputy-in-the-cloud/", "published_at": "2026-07-09T15:53:02+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb47d9983b1", "title": "An Optimistic Nihilist's View of the Vuln-apocalypse", "url": "https://kattraxler.cloud/an-optimistic-nihilists-view-of-the-vuln-apocalypse/", "published_at": "2026-05-28T01:32:24+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb47e599495", "title": "Can we afford to get lost anymore? Can we afford not to?", "url": "https://kattraxler.cloud/can-we-afford-to-get-lost-anymore-can-we-afford-not-to/", "published_at": "2026-03-31T22:43:24+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb47e6260a9", "title": "The San Francisco Consensus", "url": "https://kattraxler.cloud/the-san-francisco-consensus/", "published_at": "2026-03-09T04:12:46+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152c55369b4", "title": "GCP .actAs d-day > How not to remediate", "url": "https://kattraxler.cloud/gcp-actas-dday/", "published_at": "2026-03-09T02:38:08+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152c0542a0e", "title": null, "url": "https://kattraxler.cloud/cv/", "published_at": "2026-03-08T03:40:52+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152ca05f78e", "title": "Abusing the Replicator: Silently Exfiltrating Data with the AWS S3 Replication Service", "url": "https://kattraxler.cloud/aws-abusing-the-replicator-s3-replication/", "published_at": "2026-03-08T03:10:17+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152ce95e2c2", "title": "vuln - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/vuln/", "published_at": "2026-03-08T02:51:45+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cac42075", "title": "GCP Roles and Permissions 101", "url": "https://kattraxler.cloud/gcp-roles-permissions-101/", "published_at": "2026-03-08T02:49:59+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cbb20278", "title": "GCP IAM Policy 101", "url": "https://kattraxler.cloud/gcp-iam-policy-101/", "published_at": "2026-03-08T02:48:03+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cbf2d155", "title": "GCP Service Account 101", "url": "https://kattraxler.cloud/gcp-service-accounts-101/", "published_at": "2026-03-08T02:46:50+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152ccaea91d", "title": "GCP Resource Hierarchy 101", "url": "https://kattraxler.cloud/gcp-resource-hierarchy-101/", "published_at": "2026-03-08T02:45:42+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cd19eb4b", "title": "GCP AI Notebooks Vulnerability - Remediation", "url": "https://kattraxler.cloud/gcp-ai-notebooks-vulnerability-remediation-update/", "published_at": "2026-03-08T02:44:08+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cdba2c50", "title": "Bypassing GCP Org Policy with Custom Metadata", "url": "https://kattraxler.cloud/gcp-org-policy-bypass-ai-notebooks/", "published_at": "2026-03-08T02:43:00+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cdc9117b", "title": "GCP Users and Group 101", "url": "https://kattraxler.cloud/gcp-users-groups-101/", "published_at": "2026-03-08T02:41:05+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152ce148005", "title": "Log4J’s Unique Impact In The Cloud", "url": "https://kattraxler.cloud/log4j-in-cloud-environments/", "published_at": "2026-03-08T02:39:21+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152ceb8b2a0", "title": "musings - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/musings/", "published_at": "2026-03-08T02:35:11+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152c0d260dd", "title": null, "url": "https://kattraxler.cloud/about/", "published_at": "2026-03-08T02:26:20+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cf6ad674", "title": "ai - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/ai/", "published_at": "2026-03-08T02:00:32+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152cfbfe970", "title": "gcp - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/gcp/", "published_at": "2026-03-08T01:40:03+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152d03b1656", "title": "101 - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/101/", "published_at": "2026-03-08T01:40:03+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152d0a9fcd0", "title": "research - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/research/", "published_at": "2026-03-08T01:40:03+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152d181c4af", "title": "aws - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/aws/", "published_at": "2026-03-08T01:40:03+00:00" }, { "id": "01a0d300-59bf-7066-9089-f152d1c48ebe", "title": "201 - No-Slop Research & Human Thoughts on Security", "url": "https://kattraxler.cloud/tag/201/", "published_at": "2026-03-08T01:40:03+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb47f5119c1", "title": "You are the Blackboard - AI Agent Assisted Bug Hunting", "url": "https://kattraxler.cloud/ai-agent-assisted-bug-hunting/", "published_at": "2025-03-07T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb480029db4", "title": "GCP IAM 201 - OAuth Scopes", "url": "https://kattraxler.cloud/gcp-oauth-scopes-201/", "published_at": "2025-02-16T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb480401193", "title": "Working as Intended - The Unauditable, Unmanageable Keys in Google Cloud", "url": "https://kattraxler.cloud/unauditable-keys-in-google-cloud/", "published_at": "2024-06-17T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb480ed7412", "title": "GCP IAM 201 - Service Agents | What Can Go Wrong", "url": "https://kattraxler.cloud/gcp-service-agent-threat-model-201/", "published_at": "2024-06-11T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb4819392c4", "title": "GCP IAM 201 - Service Agents", "url": "https://kattraxler.cloud/gcp-service-agents-201/", "published_at": "2024-06-02T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb48198fff9", "title": "How I Prep for Talks – and You Can Too!", "url": "https://kattraxler.cloud/how-i-prep-for-talks/", "published_at": "2024-05-08T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb48290c460", "title": "GCP IAM 101 Series", "url": "https://kattraxler.cloud/gcp-series-101/", "published_at": "2024-03-03T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb482edde19", "title": "Attacks as a Service with The DeRF", "url": "https://kattraxler.cloud/attacks-as-a-service-with-the-derf/", "published_at": "2023-08-09T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb4830ee922", "title": "Rethinking Your Threat Models for the Cloud", "url": "https://kattraxler.cloud/rethinking-your-threatmodels/", "published_at": "2023-05-03T00:00:00+00:00" }, { "id": "01a08794-1e58-70b5-b336-beb483da8ea1", "title": "LastPass Breach: The Pyramid of Pain Perspective", "url": "https://kattraxler.cloud/lastpass-breach-pyramid-of-pain/", "published_at": "2023-03-14T00:00:00+00:00" } ] posts Claim your blog
Back to kattraxler.cloud
Blog · corpus.blog/blogs/kattraxler.cloud/posts

kattraxler.cloud

kattraxler.cloud

2026

No-Slop Research & Human Thoughts on Securityoriginal ↗
17 Sept 2026
Kat Traxler - No-Slop Research & Human Thoughts on Securityoriginal ↗
4 Sept 2026
The Docs Say It's OK: When Documentation Replaces a Fix in Vertex AIoriginal ↗
2 Sept 2026
The Two Mitigations for the Service-Account Confused Deputy in the Cloudoriginal ↗
9 Jul 2026
An Optimistic Nihilist's View of the Vuln-apocalypseoriginal ↗
28 May 2026
Can we afford to get lost anymore? Can we afford not to?original ↗
31 Mar 2026
The San Francisco Consensusoriginal ↗
9 Mar 2026
GCP .actAs d-day > How not to remediateoriginal ↗
9 Mar 2026
https://kattraxler.cloud/cv/original ↗
8 Mar 2026
Abusing the Replicator: Silently Exfiltrating Data with the AWS S3 Replication Serviceoriginal ↗
8 Mar 2026
vuln - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026
GCP Roles and Permissions 101original ↗
8 Mar 2026
GCP IAM Policy 101original ↗
8 Mar 2026
GCP Service Account 101original ↗
8 Mar 2026
GCP Resource Hierarchy 101original ↗
8 Mar 2026
GCP AI Notebooks Vulnerability - Remediationoriginal ↗
8 Mar 2026
Bypassing GCP Org Policy with Custom Metadataoriginal ↗
8 Mar 2026
GCP Users and Group 101original ↗
8 Mar 2026
Log4J’s Unique Impact In The Cloudoriginal ↗
8 Mar 2026
musings - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026
https://kattraxler.cloud/about/original ↗
8 Mar 2026
ai - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026
gcp - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026
101 - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026
research - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026
aws - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026
201 - No-Slop Research & Human Thoughts on Securityoriginal ↗
8 Mar 2026

2025

You are the Blackboard - AI Agent Assisted Bug Huntingoriginal ↗
7 Mar 2025
GCP IAM 201 - OAuth Scopesoriginal ↗
16 Feb 2025

2024

Working as Intended - The Unauditable, Unmanageable Keys in Google Cloudoriginal ↗
17 Jun 2024
GCP IAM 201 - Service Agents | What Can Go Wrongoriginal ↗
11 Jun 2024
GCP IAM 201 - Service Agentsoriginal ↗
2 Jun 2024
How I Prep for Talks – and You Can Too!original ↗
8 May 2024
GCP IAM 101 Seriesoriginal ↗
3 Mar 2024

2023

Attacks as a Service with The DeRForiginal ↗
9 Aug 2023
Rethinking Your Threat Models for the Cloudoriginal ↗
3 May 2023
LastPass Breach: The Pyramid of Pain Perspectiveoriginal ↗
14 Mar 2023