A single API call handed every registered user a Read/Write/Delete/List SAS token for an entire healthcare document container. Here’s my…

The European Commission has rendered a preliminary determination, designating Amazon Web Services (AWS) and Microsoft Azure as “gatekeepers” under the auspices of the Digital Markets A…

(Covering June 22–29, 2026)

The technology landscape in India is evolving rapidly, and DevOps has emerged as one of the most sought-after career paths in the IT…

Imagine it’s Friday evening and your release is scheduled in an hour. Just as the deployment begins, the security team finds a critical…

The tech industry is evolving faster than ever, and staying ahead means continuously learning and upgrading your skills.

A hands-on journey through AWS, Azure, and GCP red teaming — SSRF, RCE, IAM privilege mapping, and cloud metadata abuse.

Conceptual Overview & Kill Chain

Wiz found CosmosEscape in Azure's Gremlin API, exposing a master key that could access any Cosmos DB account. Microsoft fixed it, with no customer impact found.

Understanding Dangling DNS Records Forgotten domain records often lurk unnoticed within corporate networks. Consequently, these abandoned entries create severe security risks when cloud resources …

Disclaimer: This walk-through documents an authorized TryHackMe cloud-security lab. The techniques described here should only be used in…

Solution:

Room Link: https://tryhackme.com/room/hh-cryptocabana-f81cac95

Overview

A hardcoded SAS token in the website’s JavaScript led to a service account. That service account unlocked an Azure Key Vault. The vault’s…

Exploiting an Over-Permissioned Azure SAS Token to Recover the Hidden Flag

Cloud Capture-the-Flag (CTF) challenges are a great way to learn how small cloud misconfigurations can combine into a full compromise. This…

An internal API has an easy life. It sits inside a private network, and only our own services call it. Nobody outside the company can reach…

A modern SOC can generate millions of security events every day.

A hands-on look at bridging small hardware with modern cloud security tooling. Not a how-to, but, just a glimpse of what Azure is capable…