Even though I'm posting this to get a 35% off coupon, I cant avoid saying it's freaking cool: lo.cafe/notchnook
darryk10 retweeted
Our threat research team uncovered a massive cryptojacking operation targeting free GitHub and Heroku accounts. Dubbed "freejacking," PURPLEURCHIN is abusing compute allocated for free trial accounts on CI/CD platforms.
Click to see what's going on and why you should care!
darryk10 retweeted
Happening now: Sysdig security experts & #Falco contributors @darryk10 & @loresuso are teaming up at #CloudNative SecurityCon to explain how to use #CNCF container runtime security tool @falco_org to detect & monitor container escaping techniques based on capabilities. @KubeCon_
darryk10 retweeted
Are you attending @KubeCon_ NA '22? The Falco community is presenting, "The eye of Falco: you can escape but not hide." Join @loresuso & @darryk10 at #CNSCON Oct. 25 to learn more. Register here: sched.co/1AOkR #opensource
darryk10 retweeted
Interested in the #OSS project @falco_org?
See @lorisdegio's keynote on detecting GitHub security issues with Falco at #CNSCON on 10/25! Also catch @darryk10 & @loresuso's session on using Falco to detect & monitor container escaping techniques: okt.to/WonyXa
darryk10 retweeted
Bad Actor: @darryk10 looks at ways to avoid and detect IAM security holes admin-magazine.com/Archive/2… #security #IAM #confirguration #misconfiguration #EC2 #AWS #cloud
ALT actors on a stage in front of a red curtain
darryk10 retweeted
Calling all #KubernetesSecurity users at #BHUSA! Catch @sysdig engineers @darryk10 & @pellibert1's live demo on Day 2 of #BlackHat2022 (10am). Learn how to use #Falco plugins to extend the open source @falco_org detection engine with new event sources.
okt.to/QT269S – at Las Vegas, NV
darryk10 retweeted
Strengthen your threat detection!
Aug 11 (10AM) at #BHUSA (@BlackHatEvents) @pellibert1 & @darryk10 are demoing the process of creating open source @falco_org plugins.
Join to learn the new Falco plugin approach and how to use them when there's a breach. okt.to/08yiX4
darryk10 retweeted
Be sure to catch @sysdig engineers @darryk10 & @pellibert1's demo on Day 2 of #BlackHat2022 to learn how to extend @falco_org with new event sources using Falco Plugins. #ContainerSecurity
okt.to/mGWo4i
darryk10 retweeted
Learn how to leverage Falco in real breaches!
On Aug 11 (10AM) at #BHUSA (@BlackHatEvents) @pellibert1 & @darryk10 will be demoing the process of creating open source @falco_org plugins to extend the Falco detection engine to new event sources. okt.to/kBhNOP
darryk10 retweeted
This August at #BlackHatUSA, @pellibert1 and @darryk10 will be demoing the process of creating open source @falco_org plugins for any source. Simplify your life, learn how to create a consistent threat detection language across multiple clouds. okt.to/p0bUzc
Capabilities provide a way to limit the level of access a container. However, they are often misconfigured, granting excessive privileges to processes and threads
Checkout my new article on how to detect containers' escape capabilities with #Falco
sysdig.com/blog/container-es…
darryk10 retweeted
Security research @darryk10 outlines 3 common techniques bad actors use to gain high privileges inside cloud environments. Starting with credentials found online or tricking users in a phishing attack, they then proceed within the account. Learn so you can reduce your own risk!
Bad Actor: @darryk10 looks into exploiting, detecting, and correcting IAM security misconfigurations admin-magazine.com/Articles/… #security #IAM #cloud #AWS #infrastructure #admin
ALT actors on a stage with a red curtain
darryk10 retweeted
Bad Actor: @darryk10 looks into exploiting, detecting, and correcting IAM security misconfigurations admin-magazine.com/Articles/… #security #IAM #cloud #AWS #infrastructure #admin
ALT actors on a stage with a red curtain
darryk10 retweeted
Want to check if your system is ready for @falco_org ? Try this script github.com/Issif/falco-drive… and help community by adding more drivers
darryk10 retweeted
We’re proud to announce we raised $350M at a $2.5B valuation! 🚀
We want to thank our customers and partners for trusting us to secure their cloud and container environments! This milestone is a reflection of the confidence our customers have in us. sysdig.com/blog/ceo-suresh-o…
darryk10 retweeted
Protect your PHP Websites with CrowdSec, the Open-Source, Participative IPS for Linux
linuxtoday.com/developer/pro…
darryk10 retweeted
👀 Pod Security graduated to beta in Kubernetes v1.23 so @JimmAngel and I wrote a blog to help teach you all about this fantastic workload security enhancement. Check it out kubernetes.io/blog/2021/12/0…
darryk10 retweeted
⚔THREAT NEWS!⚔ The Sysdig Threat Research Team detected an attack attributed to the TeamTNT. 🚨Once access is gained, the malware 👾 steals credentials using EC2 instance metadata!🚨 Learn how they exploited a ✏WordPress Pod deployed on #K8s cluster: setns.run/3Dx1Z5O
