CloudSec Wine
前往频道在 Telegram
All about cloud security Contacts: @AMark0f @dvyakimov About DevSecOps: @sec_devops
显示更多2 273
订阅者
无数据24 小时
无数据7 天
+130 天
正在加载数据
相似频道
标签云
进出提及
---
---
---
---
---
---
吸引订阅者
十月 '2610月 '26
十月 '26
+22
在0个频道中
九月 '26
+38
在1个频道中
Get PRO
八月 '26
+25
在0个频道中
Get PRO
七月 '26
+40
在1个频道中
Get PRO
六月 '26
+24
在0个频道中
Get PRO
五月 '26
+41
在2个频道中
Get PRO
四月 '26
+38
在2个频道中
Get PRO
三月 '26
+81
在4个频道中
Get PRO
二月 '26
+34
在0个频道中
Get PRO
一月 '26
+38
在0个频道中
Get PRO
十二月 '25
+30
在0个频道中
Get PRO
十一月 '25
+31
在0个频道中
Get PRO
十月 '25
+27
在0个频道中
Get PRO
九月 '25
+20
在0个频道中
Get PRO
八月 '25
+31
在0个频道中
Get PRO
七月 '25
+15
在0个频道中
Get PRO
六月 '25
+28
在0个频道中
Get PRO
五月 '25
+24
在3个频道中
Get PRO
四月 '25
+26
在0个频道中
Get PRO
三月 '25
+17
在0个频道中
Get PRO
二月 '25
+29
在1个频道中
Get PRO
一月 '25
+11
在0个频道中
Get PRO
十二月 '24
+18
在0个频道中
Get PRO
十一月 '24
+33
在0个频道中
Get PRO
十月 '24
+35
在1个频道中
Get PRO
九月 '24
+44
在1个频道中
Get PRO
八月 '24
+47
在1个频道中
Get PRO
七月 '24
+39
在0个频道中
Get PRO
六月 '24
+27
在0个频道中
Get PRO
五月 '24
+27
在0个频道中
Get PRO
四月 '24
+55
在1个频道中
Get PRO
三月 '24
+42
在1个频道中
Get PRO
二月 '24
+49
在1个频道中
Get PRO
一月 '24
+47
在1个频道中
Get PRO
十二月 '23
+58
在1个频道中
Get PRO
十一月 '23
+43
在1个频道中
Get PRO
十月 '23
+25
在1个频道中
Get PRO
九月 '23
+50
在0个频道中
Get PRO
八月 '23
+45
在0个频道中
Get PRO
七月 '23
+40
在0个频道中
Get PRO
六月 '23
+52
在0个频道中
Get PRO
五月 '23
+131
在0个频道中
Get PRO
四月 '23
+27
在0个频道中
Get PRO
三月 '23
+59
在0个频道中
Get PRO
二月 '23
+23
在0个频道中
Get PRO
一月 '23
+20
在0个频道中
Get PRO
十二月 '22
+19
在0个频道中
Get PRO
十一月 '22
+29
在0个频道中
Get PRO
十月 '22
+32
在0个频道中
Get PRO
九月 '22
+28
在0个频道中
Get PRO
八月 '22
+48
在0个频道中
Get PRO
七月 '22
+48
在0个频道中
Get PRO
六月 '22
+38
在0个频道中
Get PRO
五月 '22
+69
在0个频道中
Get PRO
四月 '22
+27
在0个频道中
Get PRO
三月 '22
+16
在0个频道中
Get PRO
二月 '22
+24
在0个频道中
Get PRO
一月 '22
+90
在0个频道中
Get PRO
十二月 '21
+42
在0个频道中
Get PRO
十一月 '21
+22
在0个频道中
Get PRO
十月 '21
+27
在0个频道中
Get PRO
九月 '21
+97
在0个频道中
Get PRO
八月 '21
+53
在0个频道中
Get PRO
七月 '21
+61
在0个频道中
Get PRO
六月 '21
+86
在0个频道中
Get PRO
五月 '21
+10
在0个频道中
Get PRO
四月 '21
+15
在0个频道中
Get PRO
三月 '21
+29
在0个频道中
Get PRO
二月 '21
+93
在0个频道中
Get PRO
一月 '21
+52
在0个频道中
Get PRO
十二月 '20
+764
在0个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 26 十月 | 0 | |||
| 25 十月 | +1 | |||
| 24 十月 | 0 | |||
| 23 十月 | +1 | |||
| 22 十月 | +1 | |||
| 21 十月 | +1 | |||
| 20 十月 | +3 | |||
| 19 十月 | +1 | |||
| 18 十月 | +1 | |||
| 17 十月 | +1 | |||
| 16 十月 | +1 | |||
| 15 十月 | 0 | |||
| 14 十月 | +4 | |||
| 13 十月 | +1 | |||
| 12 十月 | +2 | |||
| 11 十月 | +1 | |||
| 10 十月 | 0 | |||
| 09 十月 | 0 | |||
| 08 十月 | 0 | |||
| 07 十月 | 0 | |||
| 06 十月 | +1 | |||
| 05 十月 | 0 | |||
| 04 十月 | 0 | |||
| 03 十月 | 0 | |||
| 02 十月 | +2 | |||
| 01 十月 | 0 |
频道帖子
🔶 Introducing Amazon ECS Gateway: A fully-managed ingress solution for ECS services
Amazon ECS Gateway is a new account-level resource that automatically provisions ingress infrastructure for ECS services. Platform teams define networking, TLS, and WAF settings once, and application teams opt in with a gateway connector.
https://aws.amazon.com/ru/blogs/aws/introducing-amazon-ecs-gateway-a-fully-managed-ingress-solution-for-ecs-services
#aws
| 2 |  🤖 How the Claude Code team does code review
Claude Code's team automates most code review via pre-PR verification, AI and security reviewers that block merges, risk-tiered human approval, merge queues, feature flags, and fast rollback. Humans review risky code and architecture, minimizing time without raising reverts or incidents.
https://claude.dev/blog/solving-code-review-at-anthropic
#AI | 162 |
| 3 |  🤖 Getting Agents to tell on themselves
Thinkst's Agent Provocateur is a Canary personality that exploits agent suggestibility. It greets scanning agents, engages them helpfully, and probes for username, MAC address, and SSH host-key fingerprint, raising alerts. Internal tests reported agents tripping it 100% of the time.
https://blog.thinkst.com/2026/09/getting-agents-to-tell-on-themselves.html
#AI | 201 |
| 4 |  🤖 Managing Agentic Security at Scale
Salesforce's two-track remediation model for AI-discovered vulnerabilities: a strategic track fixes shared architectural choke points, retiring findings in bulk; a tactical track closes validated multi-step exploit chains on adversary timelines.
https://www.salesforce.com/blog/managing-agentic-security-at-scale
#AI | 249 |
| 5 |  One Day Offer: создавай архитектуру безопасности для Сбера! 🛡
24 октября центр кибербезопасности проведёт экспресс-отбор в команду для архитекторов, которые готовы к амбициозным задачам:
✔️ Разрабатывать и развивать архитектуру безопасности.
✔️ Организовывать внедрение средств защиты информации.
✔️ Контролировать эффективность реализованных мер.
Если ты проектируешь не «чтобы работало», а «чтобы было надёжно» — регистрируйся на One Day Offer. До встречи, будущий коллега! 💚 | 284 |
| 6 |  🔶 Penetration testing every deployment with AWS Continuum
How to deploy a CI/CD gate using AWS Continuum that runs penetration tests scoped to each deployed change. It blocks production promotion when validated findings meet a severity threshold. Authentication uses OIDC rather than stored keys.
https://aws.amazon.com/ru/blogs/security/penetration-testing-every-deployment-with-aws-continuum
#aws | 254 |
| 7 | unprompted-state-of-ai-cybersecurity-2026_PRINT-1 (2).pdf | 276 |
| 8 | ![🤖 State of AI Cybersecurity Analysis of 490 [un]prompted 2026 talk submissions: 71% concern agents, evals rose to 30%, promp](data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDACgcHiMeGSgjISMtKygwPGRBPDc3PHtYXUlkkYCZlo+AjIqgtObDoKrarYqMyP/L2u71////m8H////6/+b9//j/2wBDASstLTw1PHZBQXb4pYyl+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj/wAARCAALACgDASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwDWY4FMVnZjgrgVKRmkFAAc496iLSZwv8qmpAoHQUAAzjk5opaKAP/Z){kind=small} 🤖 State of AI Cybersecurity
Analysis of 490 [un]prompted 2026 talk submissions: 71% concern agents, evals rose to 30%, prompt injection fell to 18%. Also, attacks increasingly target the agent harness.
#AI | 273 |
| 9 |  +1👩💻 3 lessons from frontier AI vulnerability research
FORGE Lab reports 140 Windows CVEs and 155 validated open-source reports. Three lessons: measure the full pipeline, not just findings; spend reasoning only where it removes uncertainty; and make validation and remediation a continuous learning loop.
https://www.microsoft.com/en-us/security/blog/2026/10/07/3-lessons-from-frontier-ai-vulnerability-research
#azure | 302 |
| 10 |  20 октября в 12:00 (мск) пройдёт бесплатный вебинар «Мониторинг событий безопасности в MWS Cloud Platform».
Разработчики сервиса:
✅ Расскажут про возможности сервиса аудитных логов в облаке MWS Cloud Platform
Покажут в прямом эфире, как экспортировать их в SIEM-системы
✅ Вебинар будет полезен CISO, ИБ-специалистам, DevOps-инженерам и SOC-специалистам. Регистрируйтесь, подключайтесь к прямому эфиру и задавайте вопросы в чате.
🗓 20 октября в 12:00 | 289 |
| 11 |  🔶 Introducing Strands Box: AI agent sandboxes powered by Dogwood
Strands Box is an open source (Apache 2.0) developer preview sandbox for AI agents. It combines OS-level isolation (such as macOS Seatbelt) with Dogwood policies that govern actions at egress, Python, Shell, and MCP enforcement points.
https://aws.amazon.com/ru/blogs/opensource/introducing-strands-box-ai-agent-sandboxes-powered-by-dogwood
#aws | 254 |
| 12 |  👩💻 Azure's Weakest Link - Five Full Cross-Tenant Compromises
Five critical Azure cross-tenant privilege escalation vulnerabilities in API Connections (Logic Apps) were found via path traversal in DynamicInvoke, undocumented Dynamic* endpoints, and the host.api.RuntimeUrl parameter, yielding $200,000 in bug bounties.
https://binsec.no/posts/2026/10/one-root-case
#azure | 296 |
| 13 |  +1🤖 The AI SDLC transformation playbook
Atlassian's shared their own version of an AI SDLC playbook, which outlines transforming the full dev lifecycle using agentic AI, requiring two platform investments (context graph, measurement) and workflow shifts across planning, design, development, review, and maintenance, with humans retaining governance and judgment.
https://www.atlassian.com/blog/ai-at-work/ai-sdlc-transformation-playbook
#AI | 329 |
| 14 |  ⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode
Datadog Security Labs found GHSA-632h-h47v-g4x4 in OpenCode: the unauthenticated /global/upgrade API endpoint accepted arbitrary npm tarball URLs, enabling RCE via a crafted cross-origin HTML form submission bypassing CORS.
https://securitylabs.datadoghq.com/articles/opencode-upgrade-remote-code-execution
#RCE | 355 |
| 15 |  🤖 How DigitalOcean Manages Credentials for Autonomous Agents
DigitalOcean Managed Agents secure autonomous workloads by ensuring agents never hold live credentials directly, utilizing ephemeral execution-time brokering via Action Gateway and strict runtime boundaries. This architecture aligns with NVIDIA's Open Agent Safety Platform and OpenShell policy schemas to prevent data exfiltration and limit blast radii across agent swarms.
https://www.digitalocean.com/blog/how-digitalocean-manages-credentials-for-autonomous-agents
#AI | 333 |
| 16 |  👩💻 Storm-3168: Agentic-driven cloud attacks using compromised service principals
Storm-3168 (JADEPUFFER) used compromised Azure service principals to conduct automated reconnaissance, bulk deletion of Storage Accounts, Key Vaults, and Function Apps, and credential harvesting via ListKeys, consistent with ransomware-aligned objectives. Mitigations include least privilege, secret rotation, and resource locks.
https://www.microsoft.com/en-us/security/blog/2026/09/25/storm-3168-agentic-driven-cloud-attacks-using-compromised-service-principals
#azure | 327 |
| 17 |  🤖 Securing the software factory at machine speed
GitLab's CISO argues that agentic AI development requires security, governance, and guardrails embedded in the SDLC execution path. The key metric is time from detection to verified remediation, driven to machine speed using AI-powered triage, constrained agent identities, and continuous scanning.
https://about.gitlab.com/blog/securing-the-software-factory-at-machine-speed
#AI | 289 |
| 18 |  +1🤖 Throw Away the Playbook: Security in the AI-Native SDLC
We, as an industry, should have the courage to throw away the playbooks we've been working on for the past 20+ years and create new (and better) ones for the AI era.
https://blog.marcolancini.it/2026/blog-ai-sdlc
#AI | 331 |
| 19 |  🔴 Strengthen your CI/CD pipeline with new Secure Source Manager capabilities
Google Cloud Secure Source Manager adds two GA features: a Code Owners system enabling per-file and per-branch PR approval governance with nestable CODEOWNERS files, and Developer Connect integration for private-network CI/CD connectivity using Private Service Connect and VPC Service Controls.
https://cloud.google.com/blog/products/identity-security/strengthen-your-cicd-pipeline-with-new-secure-source-manager-capabilities
#gcp | 350 |
| 20 |  🔶 Exploring the new AWS Sign Up experience
This post will explore what this new concept does, how it works with the new Account Access capability, and why a strong security posture still requires upgrading out of the sandbox.
https://www.wiz.io/blog/exploring-the-new-aws-sign-up-experience
#aws | 317 |
