News for hackers. Stuff that matters.
Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by jcims on Tuesday September 14, 2021 @09:59PM (#28534306)
I'm sure its awkward but they appear to be an equal opportunity reporter - https://www.wiz.io/blog/black-hat-2021-aws-cross-account-vul...

Their product is pretty interesting. I did a demo a while back and their approach of building a large graph and doing a good amount of reachability (network and entitelement) leads to some useful signal. It's not entirely novel, JupiterOne has been doing something in the same vein for years now but it seems to work well. Still feels a bit rough around the edges but i thought it was interesting and could work well in situations where simple checkbox-style config analysis falls short.

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by keiko-z on Wednesday September 15, 2021 @07:58AM (#28537947)
I was able to leverage JupiterOne to identify the misconfiguration mentioned in the Wiz article across all my AWS accounts in a single query. Pretty nifty.

They shared that query and a bunch more in this blog: https://try.jupiterone.com/my-bucket-my-data-or-is-it