Authentication is one of the most important security boundaries in modern cloud environments.

An API key identifies the project or application behind a request. An OAuth access token identifies a principal and carries a scope and an…

Lab link

Two stolen Azure identities gave one attacker control over an entire cloud tenant in June 2026. According to new research from Microsoft Security, the JADEPUFFER Azure attack wiped most of the sto…

What I’ve learned so far, and what other cloud providers should know before they start

I recently started learning more about AWS Cloud Security as part of my CPENT preparation.

TL;DR AWS published two security bulletins on October 2, 2026, covering four CVEs. Three hit Loom for AWS, an open-source AI agent platform, including an admin takeover bug. The fourth lets a Sage…

Cloud security requires a slightly different approach from traditional network security. In cloud environments, the focus is often on the…

Letting an AI agent attack your app takes minutes to set up. Deciding what it can reach is the hard part

In the security industry, red teams and blue teams are a familiar ritual. Red teams simulate attackers; blue teams defend. Enterprises…