The complexity of the cloud technology landscape creates a perfect place for attackers to hide and can serve as an ideal launchpad for attacks. This year’s hot off the press CSA Top Threats report highlights the 11 most critical threats, risks and vulnerabilities…

🛡️ Awesome Cloud Security Resources ⚔️. Contribute to 4ndersonLin/awesome-cloud-security development by creating an account on GitHub.

Multicloud fluency — proficiency and certification in two major cloud providers (Google Cloud, AWS, Microsoft Azure) — can help your career.

A comprehensive guide that provides a structured approach to reviewing the security architecture of a multi-cloud SaaS company and finding its most critical components.

Multi-Cloud Security Auditing Tool. Contribute to nccgroup/ScoutSuite development by creating an account on GitHub.

Cloud Security Posture Management (CSPM). Contribute to aquasecurity/cloudsploit development by creating an account on GitHub.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments. - RhinoSecurityLabs/pacu

Azure Red Team tool for graphing Azure and Azure Active Directory objects - GitHub - Azure/Stormspotter: Azure Red Team tool for graphing Azure and Azure Active Directory objects

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team. - GitHub - RhinoSecurityLabs/GCP-IAM-Privilege-Escalation: A collection of GCP IAM privilege escalat...

This is written jointly with Tim Peacock and will eventually appear on the GCP blog. For now, treat this as “posted for feedback” :-)…

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps C...

As many of you already know, I have spent last couple of years purely focusing on security monitoring, leveraging Microsoft security solutions in the cloud. Even though, my work is focused on Micro…

Collection of Cloud and DevSecOps learning resources - chughes29/Cloud-DevSecOps-Learning

Healthcare providers are overconfident in their cloud infrastructure and unaware of how technology gaps and poor cyber hygiene leave protected health information exposed to potential breaches,