Blog

RedTalk: Network ACLs Behave Differently Amongst Public Cloud Providers

The Issue: Network ACLs Behave Differently Amongst Public Cloud Providers

Not all firewalls are created equal. Some are generous... some are not...and not all firewall controls amongst the public...

Read More

Gaurav Kumar

06.07.18 6:00 AM

RedTalk: Best Practices for Remediating Account Compromise Attacks

In the second episode of RedTalk, we discuss the best practices for remediating account compromise attacks.

Read More

Alok Tongaonkar

05.24.18 13:22 PM

Cloud Security Best Practices: Top 4 Tips for Preventing Network Intrusions in Public Cloud Computing Environments

Traditional network intrusion detection systems (NIDS) have long been a staple of on-premise security stacks. Deploying, managing and obtaining actionable results from these systems was often a...

Read More

Varun Badhwar

05.22.18 6:05 AM

Instance Metadata API: A Modern Day Trojan Horse

A while back, a researcher had reported that the Instance Metadata feature in public cloud platforms makes them a very effective exploitation target. Essentially, an instance’s metadata can be...

Read More

Michael Higashi

05.15.18 6:00 AM

RedTalk: Privilege Escalation Through IAM Instance Profile Role

In the first of our new video and blog series, RedTalk, we will discuss an interesting privilege escalation attack that could impact public cloud computing environments. Per wikipedia,

Read More

Gaurav Kumar

05.08.18 8:00 AM

Cloud Security Trends and Equipping your “PreCrime” Unit to Combat Tomorrow’s Cybercrime

"Minority Report” officers behind the PreCrime police force reduced felonies by 99.8 percent, and by April 2054, Washington, D.C., and Northern Virginia were murder-free for five consecutive...

Read More

RedLock CSI Team

02.22.18 6:00 AM

Lessons from the Cryptojacking Attack at Tesla

 

The Cryptojacking Epidemic

A few months ago, the RedLock Cloud Security Intelligence (CSI) team found hundreds of Kubernetes administration consoles accessible over the internet without any...

Read More

RedLock CSI Team

02.20.18 6:00 AM

Cloud Security Trends: Winter is Coming

If you’re a Game of Thrones fan like us, you can probably recount a favorite battle or two that put you on pins and needles. Whether it was the Lannisters in the Battle of the Blackwater, or...

Read More

RedLock CSI Team

10.05.17 6:00 AM

Money Doesn't Grow on Trees, but it’s Growing in the Cloud

The RedLock Cloud Security Intelligence (CSI) team had previously reported (refer to Public Cloud Infrastructure Security Trends May 2017 report) that hundreds of Kubernetes administration...

Read More

RedLock CSI Team

10.05.17 5:59 AM

Google Groups Misconfiguration Security Advisory

The RedLock CSI team discovered hundreds of Google Groups that have publicly exposed messages containing sensitive information.

 

Read More

RedLock CSI Team

07.24.17 9:00 AM

Subscribe to Blog Updates

Recent Posts