Submissions by christophetd

Stop worrying about 'allowPrivilegeEscalation'

Amazon ECS is the new EC2 for crypto mining

Partial bypass of the login rate limiting in the AWS Console

Cloud Breaches of 2022

Investigating a backdoored PyPI package targeting FastAPI applications

Identify malicious PyPI packages using static analysis and metadata heuristics

Demystifying the OpenSSL punycode vulnerability and exploitation walk-through

Using the Dirty Pipe Vulnerability to Break Out from Containers

"Stratus Red Team", an open-source adversary emulation tool for the cloud

Using Twitter to notify careless developers – the unorthodox way

Cloud Security Breaches and Vulnerabilities: 2021 in Review