It would mean so much to me to have a turn out of the #cloudSecurity community to my talk at the @cloudvillage-dc.bsky.social
Tuesday | 11:00am

rsa2025.cloud-village.org#day-2

It’s not just as a belt n suspenders talk but a ‘why do we only suspenders’ talk.

It’ll be a little subversive 🖤

AWS provides a comprehensive multi-account strategy for Fault Injection Service (FIS) that enables organizations to systematically validate workload resilience across different accounts using centralized management, role-based access controls, and controlled chaos engineering experiments.

Amazon EKS now supports Bottlerocket FIPS AMIs in managed node groups, offering enhanced security and compliance for containerized workloads in regulated industries.

Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a "legacy environment" last used in 2017.

This is absurdly great, but I haven't read a single news article about it. A fully open source, offline-first alternative to Notion that's a collab between the French and German governments because they want to host docs securely and on their own terms. THIS is what Europe should be doing.

Kudos to whoever at Semgrep or Github started removing the compromised action (tj-actions), cause folks are now starting to get 404's.
Saving the businesses who won't respond until Monday:
semgrep.dev/blog/2025/po...

Common reasoning is that SMS 2FA is bad due to the risk of SIM swapping. It’s also bad if the telecommunications networks are hostile 😬
www.forbes.com/sites/zakdof...