[Webinar] What Insider Threats Actually Look Like - A Lesson From the Rippling Lawsuit

[WATCH NOW]

Announcing Permiso Discover - A free identity inventory & visibility for human, non-human and AI

[Join the Waitlist]

Platform
Resources
Blog
About

Sign In
Request A Demo

Platform
- Permiso  Platform
  
  Our unified identity security platform combines Identity Security Posture Management (ISPM) with Identity Threat Detection and Response (ITDR) to protect all of your human and non-human identities, wherever they go.
  
  Learn More
- Solutions
  Integrations
  
  Permiso Discover
- Use Cases
- See Permiso in action
  
  Demo, please!
Resources
- Resource Center
  - Report
  - eBook
  - Collateral
  - Webinar
  - Press
- Guides
- Featured Resources
  
  CISO Guide to Detecting and Preventing Identity Attacks
  Learn More
  
  The Human Touch In Creating and Securing Non-Human Identities
  Learn More
Blog
About
- About
  
  P0 Labs
- Careers
  
  Contact
- Hear Ye, Hear Ye
  
  Subscribe to Cloud Chronicles for the latest in cloud security!

© Permiso Security 2022

|Privacy Policy|Terms

Cloud Chronicles

The latest research, reports and releases from the minds at Permiso Security.

module_168716615926221

Ian Ahl

When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying

Ian Ahl | 10.03.24

Key Takeaways Attacks against GenAI Infrastructure like AWS Bedrock have increased substantially over the last six (6) months. Particularly with exposed access keys. Attackers are hijacking victim...

Illustration Cloud

Illustration Cloud

All Categories

Nathan Eades

Azure's Apex Permissions: Elevate Access & The Logs Security Teams Overlook

Nathan Eades

Azure's Apex Permissions: Elevate Access & The Logs Security Teams Overlook

Nathan Eades 03.13.2025

Azure's "Elevate Access" feature is a critical security control point that deserves more comprehensive technical coverage than it typically receives. At Permiso, our P0 Labs team brings diverse cloud...

Thank You

Introducing Azure Activity Log Axe: An Open-Source Tool to simplify and improve the analysis of Azure Activity logs

Nathan Eades

Introducing Azure Activity Log Axe: An Open-Source Tool to simplify and improve the analysis of Azure Activity logs

Nathan Eades 09.16.2024

We are excited to formally announce the public availability of Azure Activity Log Axe, an open-source tool designed to simplify and improve the analysis of Azure Activity logs. The tool, initially...

Azure Logs: Breaking Through the Cloud Cover

Nathan Eades

Azure Logs: Breaking Through the Cloud Cover

Nathan Eades 01.17.2024

Permiso consistently observes that engineers and analysts often struggle with interpreting Azure Monitor Activity Logs, facing confusion and achieving only a partial understanding even after gaining...

Privileged Identity Management (PIM): For Many, a False Sense of Security

Nathan Eades

Privileged Identity Management (PIM): For Many, a False Sense of Security

Nathan Eades 12.07.2023

Privileged Identity Management (PIM): PIM is described as a service within Microsoft Entra ID, designed to manage, control, and monitor access to crucial organizational resources, encompassing...

New Phone, Who Dis? How Cloud Environments Are Exploited for Smishing Campaigns

Nathan Eades

New Phone, Who Dis? How Cloud Environments Are Exploited for Smishing Campaigns

Nathan Eades 04.14.2023

Commodity threat actors have recently begun to exploit cloud environments for smishing campaigns, employing techniques strikingly similar to those used in SES enumeration and abuse, as we've...

SES-pionage

Nathan Eades

SES-pionage

Nathan Eades 01.12.2023

Exposed and stolen long lived keys are often the source of incidents we identify in our client’s cloud environments. Detecting the abuse of these keys is an area we focus a lot of effort in. After...

AWS Enhancements to UpdateLoginProfile and CreateLoginProfile logging

Nathan Eades

AWS Enhancements to UpdateLoginProfile and CreateLoginProfile logging

Nathan Eades 10.25.2022

Introduction While working on detection content for our clients, we often come across situations where logging from cloud providers and identity providers does not contain the level of detail needed....

Hear Ye, Hear Ye

Subscribe to Cloud Chronicles for the latest in cloud security!

21972-312_SOC_NonCPA

Product
P0 Labs
Request a demo
About
Blog
Contact Us
Join Our Team
Resources
Sign In

© Permiso Security 2025

Security|Privacy Policy|Terms