Tag feed

#cloud-security

1,050 posts256 followers

Explore Hashnode

Alternatives

Trending tags this week

MNMilan Nikicsecuritydepth.hashnode.dev6h ago · 17 min read

Server-Side Request Forgery: Security Architect's Perspective (Part 2)

In Part 1 of this series, we examined SSRF from a developer's perspective, covering secure coding patterns, input validation, allow lists, DNS resolution checks, and HTTP client configuration in Java

0

KSKamran Shaghaghicloudironguard.hashnode.dev21h ago · 7 min read

Sandboxing AI Agents: Neutralizing OWASP LLM01 (Prompt Injection & System Persistence) with gVisor and Read-Only Filesystems

Prompt injection is widely recognized as the #1 threat in modern generative AI applications. Yet, the industry continues to treat it almost exclusively as a prompt engineering problem, relying on syst

0

KSKamran Shaghaghicloudironguard.hashnode.dev1d ago · 8 min read

Defending the AI Perimeter: Mitigating OWASP LLM10 (Model Theft & Data Exfiltration) with GKE Dataplane V2 and eBPF

When enterprises adopt Generative AI, security teams often focus entirely on the application layer: sanitizing prompt inputs and filtering chat outputs. However, as autonomous LLM agents gain tool-cal

0

MLManju Lalwanimavericksec.hashnode.dev2d ago · 4 min read

TRACE — Enterprise Risk Closure Framework

A structured loop for moving from alert closure to risk closure in enterprise SOC operations. Applies to findings closed as false positives, expected activity, or benign behaviour where the underlying

0

MGMario Gongorablog.leastprivilege.cloud2d ago · 11 min read

Writing an IAM Policy That's Actually Least Privilege

I wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I had not, entirely. The agent behind the last article does two things: it reads one secret from Secre

0

Rrathsararr-cyber.hashnode.dev3d ago · 10 min read

What We Got: From Cloud Security Platform to Operational Capability

A few months after the operationalizing work covered in the last article, it stopped being a project. It became part of how we worked. This article is about what changed once that happened. The Metri

0

MGMario Gongorablog.leastprivilege.cloud2d ago · 11 min read

Writing an IAM Policy That's Actually Least Privilege

I wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I had not, entirely. The agent behind the last article does two things: it reads one secret from Secre

0

NKNiya Kohlisterlingnext.hashnode.dev4d ago · 10 min read

AWS Skills Employers Look for in Cloud Professionals

Cloud teams need professionals who can do more than work with individual AWS services. Employers increasingly look for people who understand cloud architecture, security, automation, monitoring, and o

0

MGMario Gongorablog.leastprivilege.cloud4d ago · 8 min read

IAM Roles Anywhere: AWS Access With Zero Static Keys

Every environment I have audited has the same ghost. An IAM user with an access key and a secret key. Created for a script, a cron job, a device that needed to reach AWS. It worked, so nobody touched

0

AEAnonymous Endpointcyberpod.hashnode.devAug 11 · 5 min read

How Security Leaders Can Reduce SIEM Ingestion Costs Without Losing Visibility

For years, security teams have followed a simple rule: collect as much security data as possible and send it to the SIEM. It made sense when enterprise environments were smaller. Today, organizations

0

#cloud-security

Search Hashnode

#cloud-security

Explore Hashnode

Trending tags this week

Server-Side Request Forgery: Security Architect's Perspective (Part 2)

Sandboxing AI Agents: Neutralizing OWASP LLM01 (Prompt Injection & System Persistence) with gVisor and Read-Only Filesystems

Defending the AI Perimeter: Mitigating OWASP LLM10 (Model Theft & Data Exfiltration) with GKE Dataplane V2 and eBPF

TRACE — Enterprise Risk Closure Framework

Writing an IAM Policy That's Actually Least Privilege

What We Got: From Cloud Security Platform to Operational Capability

Writing an IAM Policy That's Actually Least Privilege

AWS Skills Employers Look for in Cloud Professionals

IAM Roles Anywhere: AWS Access With Zero Static Keys

How Security Leaders Can Reduce SIEM Ingestion Costs Without Losing Visibility