corpus.blog
41,554 blogs · 5,217,468 posts Claim your blog
Record · corpus.blog/posts/01a08745-ac63-729c-a65a-9eb303f7a79e

Cloud Security Breaches and Vulnerabilities: 2021 in Review

blog.christophetd.fr · published 22 December 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.christophetd.fr Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
103
Words captured
3,502

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/SummitRoute/csp_security_mistakes
github.com
https://about.codecov.io/apr-2021-post-mortem/
about.codecov.io
https://about.codecov.io/security-update/
about.codecov.io
https://threatpost.com/data-from-august-breach-of-amazon-partner-juspay-dumped-online/162740/
threatpost.com
https://support.kaspersky.com/general/vulnerability.aspx?el=12430
support.kaspersky.com
https://www.businessinsider.in/tech/news/aadhaar-pan-and-bank-account-numbers-leaked-in-upstox-data-breach/articleshow/82025949.cms
businessinsider.in
https://techcrunch.com/2021/03/30/mobikwik-investigating-data-breach-after-100m-user-records-found-online/
techcrunch.com
https://timesofindia.indiatimes.com/business/india-business/upstox-face-data-breach-co-says-ramped-up-security/articleshow/82021166.cms
timesofindia.indiatimes.com
https://hackerone.com/reports/801531
hackerone.com
https://bevigil.com/blog/mobile-apps-exposing-aws-keys-affect-100m-users-data/
bevigil.com
https://www.intezer.com/blog/cloud-security/misconfigured-airflows-leak-credentials/
intezer.com
https://news.ycombinator.com/item?id=29738371
news.ycombinator.com
https://www.cadosecurity.com/team-tnt-the-first-crypto-mining-worm-to-steal-aws-credentials/
cadosecurity.com
https://attack.mitre.org/groups/G0139/
attack.mitre.org
TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations Read at the source ↗
unit42.paloaltonetworks.com
https://www.datadoghq.com/blog/log4j-log4shell-vulnerability-overview-and-remediation/
datadoghq.com
https://news.sophos.com/en-us/2021/12/12/log4shell-hell-anatomy-of-an-exploit-outbreak/
news.sophos.com
https://www.google.com/search?q=site%3Aattack.mitre.org+inurl%3Agroups+%22aws%22+-filetype%3Axlsx
google.com
https://www.vice.com/en/article/v7m9ey/hobby-lobby-data-breach
vice.com
https://technologytimes.pk/2021/05/22/report-consulting-firm-leaks-global-employee-data-from-french-sporting-giant/
technologytimes.pk
https://securityboulevard.com/2021/07/shared-intel-ramifications-of-86-cities-storing-citizens-data-in-misconfigured-aws-s3-buckets/
securityboulevard.com
https://www.infosecurity-magazine.com/news/threat-actor-dumps-19-million/
infosecurity-magazine.com
https://www.vpnmentor.com/blog/report-acquirely-leak/
vpnmentor.com
https://techcrunch.com/2021/03/30/mobikwik-investigating-data-breach-after-100m-user-records-found-online/amp/?__twitter_impression=true
techcrunch.com
https://www.infosecurity-magazine.com/news/senior-citizens-personal-data/
infosecurity-magazine.com
https://www.infosecurity-magazine.com/news/recruiters-cloud-snafu-exposes/
infosecurity-magazine.com
https://www.infosecurity-magazine.com/news/legal-firm-leaks-15000-cases-via/
infosecurity-magazine.com
http://www.gercekkozmetik.com.tr/EN/cosmolog-cozmetik
gercekkozmetik.com.tr
https://www.comparitech.com/blog/information-security/utah-covid-test-center-leak/
comparitech.com
https://www.vpnmentor.com/blog/report-paleohacks-breach/
vpnmentor.com
https://www.vpnmentor.com/blog/report-Phlebotomyts-leak/
vpnmentor.com
https://www.infosecurity-magazine.com/news/telemarketing-biz-exposes-114000/
infosecurity-magazine.com
https://www.vpnmentor.com/blog/report-prisma-promotora-leak/
vpnmentor.com
https://www.vpnmentor.com/blog/report-sennheiser-leak/
vpnmentor.com
https://www.vpnmentor.com/blog/report-fleek-breach/
vpnmentor.com
https://www.vpnmentor.com/blog/report-ghana-nss-leak/
vpnmentor.com
https://www.vpnmentor.com/blog/report-babychakra-leak/
vpnmentor.com
https://vpnoverview.com/news/sega-europe-security-report/
vpnoverview.com
https://www.websiteplanet.com/blog/dwmorgan-leak-report/
websiteplanet.com
https://www.websiteplanet.com/blog/gsi-immobilier-leak-report
websiteplanet.com
https://portswigger.net/web-security/ssrf
portswigger.net
https://hackerone.com/reports/1189367
hackerone.com
https://hackerone.com/reports/1108418
hackerone.com
https://hackerone.com/reports/333419
hackerone.com
https://www.rtcsec.com/article/slack-webrtc-turn-compromise-and-bug-bounty/
rtcsec.com
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/instance-metadata-service?tabs=windows
docs.microsoft.com
https://positive.security/blog/ms-teams-1-feature-4-vulns
positive.security
https://nechudav.blogspot.com/2020/11/31k-ssrf-in-google-cloud-monitoring.html
nechudav.blogspot.com
https://sysdig.com/blog/teamtnt-aws-credentials/
sysdig.com
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers.html
docs.aws.amazon.com
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html
docs.aws.amazon.com
https://github.com/99designs/aws-vault
github.com
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html
docs.aws.amazon.com
https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html
docs.aws.amazon.com
https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html
docs.aws.amazon.com
https://www.vaultproject.io/
vaultproject.io
https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html
docs.aws.amazon.com
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html
docs.aws.amazon.com
https://www.praetorian.com/blog/aws-iam-assume-role-vulnerabilities/
praetorian.com
https://docs.datadoghq.com/integrations/amazon_web_services/?tab=roledelegation
docs.datadoghq.com
https://github.com/ibm/detect-secrets
github.com
https://github.com/zricethezav/gitleaks
github.com
https://github.com/trufflesecurity/truffleHog
github.com
https://github.com/GitGuardian/ggshield
github.com
https://github.com/deepfence/SecretScanner
github.com
https://docs.gitlab.com/ee/user/application_security/secret_detection/
docs.gitlab.com
https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning
docs.github.com
https://docs.gitguardian.com/internal-repositories-monitoring/integrations/overview
docs.gitguardian.com
https://docs.aws.amazon.com/AmazonS3/latest/userguide/configuring-block-public-access-account.html
docs.aws.amazon.com
https://github.com/toniblyx/prowler
github.com
https://github.com/nccgroup/ScoutSuite
github.com
https://github.com/duo-labs/cloudmapper
github.com
https://docs.datadoghq.com/security_platform/cspm/
docs.datadoghq.com
https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies-vpc-endpoint.html
docs.aws.amazon.com
https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html
docs.aws.amazon.com
https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-access-default-encryption/
aws.amazon.com
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
docs.aws.amazon.com
https://github.com/nccgroup/PMapper
github.com
https://www.fugue.co/blog/a-technical-analysis-of-the-capital-one-cloud-misconfiguration-breach
fugue.co
https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
aws.amazon.com
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ExamplePolicies_EC2.html
docs.aws.amazon.com
https://github.com/salesforce/metabadger
github.com
https://docs.google.com/document/d/1X737xoQviufdxZk_l33bnpp6noOmNIYvMilQCdhtwoY/edit
docs.google.com
https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html
docs.aws.amazon.com
http://InstanceCredentialExfiltration.OutsideAWS
instancecredentialexfiltration.outsideaws
https://news.ycombinator.com/item?id=29649192
news.ycombinator.com
https://twitter.com/christophetd/status/1473668697264992264
twitter.com
https://ramimac.me/
ramimac.me
https://ramimac.me/security/talks/cloudsec/BSidesCT-AWS-customer-incidents/
ramimac.me
https://tldrsec.com/blog/cloud-security-orienteering/
tldrsec.com
https://www.youtube.com/watch?v=l9R-T6PpIX8
youtube.com
https://summitroute.com/downloads/aws_security_maturity_roadmap-Summit_Route.pdf
summitroute.com
https://fwdcloudsec.org/speakers.html
fwdcloudsec.org
Hacking The Cloud
hackingthe.cloud
https://twitter.com/Frichette_n
twitter.com
https://cloudsecdocs.com/
cloudsecdocs.com
https://cloudseclist.com/
cloudseclist.com
https://twitter.com/lancinimarco
twitter.com
https://tldrsec.com/
tldrsec.com
https://twitter.com/clintgibler
twitter.com
https://docs.google.com/presentation/d/1lfEvXtw5RTj3JmXwSQDXy8or87_BHrFbo1ZtQQlHbq0/edit
docs.google.com
https://twitter.com/christophetd/status/1476873344611979264
twitter.com
https://cystack.net/research/the-attack-on-onus-a-real-life-case-of-the-log4shell-vulnerability
cystack.net
Elsewhere on blog.christophetd.fr (6)