Cloud Identity
AWS Credential Reviews: From Report to Owned Remediation
Build an evidence-based identity review with report timestamps, credential owners, explicit thresholds, and verification steps.
Reviewed
The CloudSecCorner journal
Field Notes
Daily cloud security research, threat analysis, identity and access guidance, and practical cloud defense engineering.
Field Notes / Cloud security research
Daily Cloud Security Feed
Cloud security headlines from the original publishers. Open an article to read it at the source.
-
Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities ↗
-
Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty ↗
-
AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence ↗
-
Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194) ↗
-
Digital sovereignty at re:Invent 2026: Sessions you won’t want to miss ↗
-
Don't just flag it, fix it: How to run CodeMender in your pull requests ↗
-
How to Evaluate AI Agent Cybersecurity Capabilities ↗
-
Why Does AI Agent Security in Banking Require More Than Alerts? ↗
-
Wiz and ISMAP: Building the Foundation for Japan's Public Sector ↗
-
Over a Dozen Organizations Hit in Qubole Supply Chain Attack ↗
-
N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits ↗
-
Help defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validation ↗
-
Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data ↗
-
Simplify cross-partition access with AWS IAM outbound identity federation ↗
-
Cloud CISO Perspectives: Our security forecast for 2027 ↗
Feed addresses and source status
Broad security feeds are filtered for cloud topics. Source publication dates are preserved.
- AWS Security Blog RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Google Cloud Security RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Microsoft Security RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Wiz Cloud Security RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Datadog Security Labs RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Aqua Security RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Sysdig Threat Research RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Palo Alto Networks Unit 42 RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Cloudflare Security RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- SentinelLabs RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Snyk Security Research RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Sonrai Security RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Tenable Research RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- CrowdStrike RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Trail of Bits RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- Cloud Security Alliance RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- SecurityWeek RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
- The Hacker News RSS ↗Import successful · Last success Nov 11, 2026 06:54 UTC
10 guides to explore
Cloud Identity
Review the Deployment Identity, the Function, and the Role Together
Review role delegation, Lambda code changes, service trust, and runtime access as connected cloud security boundaries.
Reviewed
Data Security
A Private S3 Bucket Is a Contract You Can Review Before Apply
Connect resolved Terraform plan values with storage access controls, encryption, transport, recovery, and post-deployment evidence.
Reviewed
Cloud Detection
CloudTrail Triage Starts With Coverage and a Defensible Timeline
Preserve event outcomes, acting sessions, collection boundaries, and corroboration when investigating cloud changes.
Reviewed
Agentic Security
MCP Security After the July 2026 Protocol Revision
Review protocol migration, token audiences, tool authorization, downstream identity, and negative integration tests.
Reviewed
Data Security
RAG and Agent Memory: Keep Data Permissions Through the Whole Pipeline
Trace tenant permissions, document ACLs, cache isolation, revocation, and deletion across retrieval and agent memory.
Reviewed
Supply Chain Security
Trusted Artifacts: SLSA 1.2, Attestations, and Deployment Identity
Separate artifact integrity, signer identity, build provenance, SBOM review, and cloud deployment authorization.
Reviewed
Cloud Native Security
Kubernetes Isolation for Agent and Build Workloads
Connect Pod admission, credential scope, filesystem limits, network enforcement, and task lifecycle tests.
Reviewed
Exposure Management
Prioritize Exposure with KEV, EPSS, and Asset Evidence
Use exploitation evidence and prediction alongside applicability, reachable attack paths, owners, and verified fixes.
Reviewed
Agentic Security
Safeguarding the AI Frontier: Evaluate Agent Runtime Controls with Evidence
A revised, vendor-neutral evaluation guide for tool boundaries, action-bound approvals, tenant isolation, and runtime evidence.
Reviewed
No guides matched that filter. Try a broader search term.
Share with the community
Have an engineering lesson or teardown to publish?
Contribute a field note, security analysis, or architecture teardown for engineers building and defending autonomous cloud systems.