[Webinar] What Insider Threats Actually Look Like - A Lesson From the Rippling Lawsuit

[WATCH NOW]

Announcing Permiso Discover - A free identity inventory & visibility for human, non-human and AI

[Join the Waitlist]

Platform
Resources
Blog
About

Sign In
Request A Demo

Platform
- Permiso  Platform
  
  Our unified identity security platform combines Identity Security Posture Management (ISPM) with Identity Threat Detection and Response (ITDR) to protect all of your human and non-human identities, wherever they go.
  
  Learn More
- Solutions
  Integrations
  
  Permiso Discover
- Use Cases
- See Permiso in action
  
  Demo, please!
Resources
- Resource Center
  - Report
  - eBook
  - Collateral
  - Webinar
  - Press
- Guides
- Featured Resources
  
  CISO Guide to Detecting and Preventing Identity Attacks
  Learn More
  
  The Human Touch In Creating and Securing Non-Human Identities
  Learn More
Blog
About
- About
  
  P0 Labs
- Careers
  
  Contact
- Hear Ye, Hear Ye
  
  Subscribe to Cloud Chronicles for the latest in cloud security!

© Permiso Security 2022

|Privacy Policy|Terms

Cloud Chronicles

The latest research, reports and releases from the minds at Permiso Security.

module_168716615926221

Ian Ahl

When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying

Ian Ahl | 10.03.24

Key Takeaways Attacks against GenAI Infrastructure like AWS Bedrock have increased substantially over the last six (6) months. Particularly with exposed access keys. Attackers are hijacking victim...

Illustration Cloud

Illustration Cloud

All Categories

The Permiso Team

How Adversaries Exploit Unmonitored Cloud Regions to Evade Detection

How Adversaries Exploit Unmonitored Cloud Regions to Evade Detection

The Permiso Team 02.04.2025

Introduction The rapid evolution of Cloud Computing over the years has transformed traditional IT infrastructure by providing flexibility, affordability, and broader accessibility to various...

Thank You

How Adversaries Abuse Serverless Services to Harvest Sensitive Data from Environment Variables

How Adversaries Abuse Serverless Services to Harvest Sensitive Data from Environment Variables

The Permiso Team 12.11.2024

Introduction In cloud computing, the evolution of serverless technology has significantly transformed how developers build and run applications. Over the years, the adoption of serverless computing...

Strategies Used by Adversaries to Steal Application Access Tokens

Strategies Used by Adversaries to Steal Application Access Tokens

The Permiso Team 08.15.2024

Introduction In today's complex landscape of modern cybersecurity, organizations and cyber-defenders must remain vigilant as adversaries continuously refine their tactics, techniques, and procedures...

Exploiting Cloud Secrets Management Repositories: Adversary Tactics and Mitigation Strategies

Exploiting Cloud Secrets Management Repositories: Adversary Tactics and Mitigation Strategies

The Permiso Team 07.02.2024

Introduction Proper handling of sensitive information, such as passwords and API keys, is a crucial responsibility for any organization and cybersecurity professional using cloud services for their...

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 2

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 2

The Permiso Team 05.21.2024

Detection and Mitigation The 'Create Snapshot', ‘Create Cloud Instance’, ‘Delete Cloud Instance’, ‘Revert Cloud Instance’ and ‘Modify Cloud Compute Configurations’ features are widely available...

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 1

Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 1

The Permiso Team 05.06.2024

The MITRE ATT&CK (Adversarial Tactics, Techniques and Common Knowledge) Framework is a globally-accessible knowledge base of adversary tactics and techniques and procedures (TTPs) which are...

An Adversary Adventure with Cloud Administration Command

An Adversary Adventure with Cloud Administration Command

The Permiso Team 04.11.2024

Introduction As the cybersecurity landscape rapidly evolves, organizations are implementing multi-cloud solutions to advance their digital transformation initiatives. On the other hand, threat actors...

Hear Ye, Hear Ye

Subscribe to Cloud Chronicles for the latest in cloud security!

21972-312_SOC_NonCPA

Product
P0 Labs
Request a demo
About
Blog
Contact Us
Join Our Team
Resources
Sign In

© Permiso Security 2025

Security|Privacy Policy|Terms