posts tagged #cloud

• February 2, 2026
  SSRF: turning the server into a proxy
• February 13, 2025
  AWS IAM: the privilege escalation paths
• February 7, 2025
  Misconfigured S3 buckets: data exposed to the world
• February 1, 2025
  Container escape: breaking out to the host
• January 26, 2025
  Kubernetes: abusing RBAC and service accounts
• January 20, 2025
  Exposed Docker socket: host root in one line
• January 14, 2025
  Serverless security: the surface that remains
• January 8, 2025
  IaC and secrets: Terraform state in the clear
• January 2, 2025
  Kubernetes secrets: base64 is not encryption
• December 27, 2024
  Managed identity: abusing the instance credentials
• December 21, 2024
  IMDSv1 vs IMDSv2: why the metadata endpoint changed