STATE OF IDENTITY SECURITY Permiso has released the 2024 Survey Report

[GET THE REPORT]

The Human Touch In Creating & Securing Non-Human Identities

[GET THE EBOOK]

Product
Integrations
Use Cases
Blog
Resources
About
- P0 Labs
- Careers
- Contact
Sign In
Request a Demo

Product
Integrations
Use Cases
Blog
Resources
About
- P0 Labs
- Careers
- Contact
Sign In
Request a Demo

© Permiso Security 2022

|Privacy Policy|Terms

Cloud Chronicles

The latest research, reports and releases from the minds at Permiso Security.

module_168716615926221

Ian Ahl

When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying

Ian Ahl | 10.03.24

Key Takeaways Attacks against GenAI Infrastructure like AWS Bedrock have increased substantially over the last six (6) months. Particularly with exposed access keys. Attackers are hijacking victim...

Illustration Cloud

Illustration Cloud

All Categories

Nathan Eades

Azure's Apex Permissions: Elevate Access & The Logs Security Teams Overlook

Nathan Eades

Azure's Apex Permissions: Elevate Access & The Logs Security Teams Overlook

Nathan Eades 03.13.2025

Azure's "Elevate Access" feature is a critical security control point that deserves more comprehensive technical coverage than it typically receives. At Permiso, our P0 Labs team brings diverse cloud...

Thank You

Introducing Azure Activity Log Axe: An Open-Source Tool to simplify and improve the analysis of Azure Activity logs

Nathan Eades

Introducing Azure Activity Log Axe: An Open-Source Tool to simplify and improve the analysis of Azure Activity logs

Nathan Eades 09.16.2024

We are excited to formally announce the public availability of Azure Activity Log Axe, an open-source tool designed to simplify and improve the analysis of Azure Activity logs. The tool, initially...

Azure Logs: Breaking Through the Cloud Cover

Nathan Eades

Azure Logs: Breaking Through the Cloud Cover

Nathan Eades 01.17.2024

Permiso consistently observes that engineers and analysts often struggle with interpreting Azure Monitor Activity Logs, facing confusion and achieving only a partial understanding even after gaining...

Privileged Identity Management (PIM): For Many, a False Sense of Security

Nathan Eades

Privileged Identity Management (PIM): For Many, a False Sense of Security

Nathan Eades 12.07.2023

Privileged Identity Management (PIM): PIM is described as a service within Microsoft Entra ID, designed to manage, control, and monitor access to crucial organizational resources, encompassing...

New Phone, Who Dis? How Cloud Environments Are Exploited for Smishing Campaigns

Nathan Eades

New Phone, Who Dis? How Cloud Environments Are Exploited for Smishing Campaigns

Nathan Eades 04.14.2023

Commodity threat actors have recently begun to exploit cloud environments for smishing campaigns, employing techniques strikingly similar to those used in SES enumeration and abuse, as we've...

SES-pionage

Nathan Eades

SES-pionage

Nathan Eades 01.12.2023

Exposed and stolen long lived keys are often the source of incidents we identify in our client’s cloud environments. Detecting the abuse of these keys is an area we focus a lot of effort in. After...

AWS Enhancements to UpdateLoginProfile and CreateLoginProfile logging

Nathan Eades

AWS Enhancements to UpdateLoginProfile and CreateLoginProfile logging

Nathan Eades 10.25.2022

Introduction While working on detection content for our clients, we often come across situations where logging from cloud providers and identity providers does not contain the level of detail needed....

Hear Ye, Hear Ye

Subscribe to Cloud Chronicles for the latest in cloud security!

21972-312_SOC_NonCPA

Product
P0 Labs
Request a demo
About
Blog
Contact Us
Join Our Team
Resources
Sign In

© Permiso Security 2024

Security|Privacy Policy|Terms