STATE OF IDENTITY SECURITY Permiso has released the 2024 Survey Report

[GET THE REPORT]

The Human Touch In Creating & Securing Non-Human Identities

[GET THE EBOOK]

Product
Integrations
Use Cases
Blog
Resources
About
- P0 Labs
- Careers
- Contact
Sign In
Request a Demo

Product
Integrations
Use Cases
Blog
Resources
About
- P0 Labs
- Careers
- Contact
Sign In
Request a Demo

© Permiso Security 2022

|Privacy Policy|Terms

Cloud Chronicles

The latest research, reports and releases from the minds at Permiso Security.

module_168716615926221

Ian Ahl

When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying

Ian Ahl | 10.03.24

Key Takeaways Attacks against GenAI Infrastructure like AWS Bedrock have increased substantially over the last six (6) months. Particularly with exposed access keys. Attackers are hijacking victim...

Illustration Cloud

Illustration Cloud

All Categories

The Permiso Team

How Adversaries Exploit Unmonitored Cloud Regions to Evade Detection

How Adversaries Exploit Unmonitored Cloud Regions to Evade Detection

The Permiso Team 02.04.2025

Introduction The rapid evolution of Cloud Computing over the years has transformed traditional IT infrastructure by providing flexibility, affordability, and broader accessibility to various...

Thank You

How Adversaries Abuse Serverless Services to Harvest Sensitive Data from Environment Variables

How Adversaries Abuse Serverless Services to Harvest Sensitive Data from Environment Variables

The Permiso Team 12.11.2024

Introduction In cloud computing, the evolution of serverless technology has significantly transformed how developers build and run applications. Over the years, the adoption of serverless computing...

Strategies Used by Adversaries to Steal Application Access Tokens

Strategies Used by Adversaries to Steal Application Access Tokens

The Permiso Team 08.15.2024

Introduction In today's complex landscape of modern cybersecurity, organizations and cyber-defenders must remain vigilant as adversaries continuously refine their tactics, techniques, and procedures...

Exploiting Cloud Secrets Management Repositories: Adversary Tactics and Mitigation Strategies

Exploiting Cloud Secrets Management Repositories: Adversary Tactics and Mitigation Strategies

The Permiso Team 07.02.2024

Introduction Proper handling of sensitive information, such as passwords and API keys, is a crucial responsibility for any organization and cybersecurity professional using cloud services for their...

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 2

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 2

The Permiso Team 05.21.2024

Detection and Mitigation The 'Create Snapshot', ‘Create Cloud Instance’, ‘Delete Cloud Instance’, ‘Revert Cloud Instance’ and ‘Modify Cloud Compute Configurations’ features are widely available...

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 1

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 1

The Permiso Team 05.06.2024

The MITRE ATT&CK (Adversarial Tactics, Techniques and Common Knowledge) Framework is a globally-accessible knowledge base of adversary tactics and techniques and procedures (TTPs) which are...

An Adversary Adventure with Cloud Administration Command

An Adversary Adventure with Cloud Administration Command

The Permiso Team 04.11.2024

Introduction As the cybersecurity landscape rapidly evolves, organizations are implementing multi-cloud solutions to advance their digital transformation initiatives. On the other hand, threat actors...

Hear Ye, Hear Ye

Subscribe to Cloud Chronicles for the latest in cloud security!

21972-312_SOC_NonCPA

Product
P0 Labs
Request a demo
About
Blog
Contact Us
Join Our Team
Resources
Sign In

© Permiso Security 2024

Security|Privacy Policy|Terms