Blog

image from Serverless Attack Vector

Serverless Attack Vector

I recently thought of a potential attack vector related to serverless. After discussing it with people at AWS it seems that, at least in theory, it is plausible. I have not tested it in my own AWS account for obvious reasons - even a simplified version could get out of control if I make a mistake and the method for stopping it has not been confirmed.
  • Security
read more
image from Over-reliance on vendors in cloud security

Over-reliance on vendors in cloud security

As the use of the cloud increases, cloud security has become increasingly critical for organisations to understand and get right. However, I often come across organisations that rely heavily on vendors to manage this for them. This article highlights the dangers of over-dependence on vendors and proposes strategies for mitigating these risks.
  • Security
read more