The Cookie Dilemma 🍪

Well, response latency is most likely not your greatest enemy and optimizing content delivery probably won’t involve fighting grizzlies in…

Lambda — Data Exfiltration

Introduction

Hey there, cybersecurity enthusiast (or just someone who likes to stay ahead of the curve) — Let’s talk about something massive that just…

You are well on your way to provisioning your AWS Infrastructure. Perhaps like me, you are setting up the Backend of that soon-to-be-viral…

Okay soooo… Yeah, I know. It’s been a minute since I last uploaded on Medium. Life’s been out here throwing punches like it’s trying to…

Unit 42 uncovers HazyBeacon, a novel backdoor using AWS Lambda URLs for stealthy C2. It's deployed via DLL sideloading, targeting Southeast Asian govts for trade documents.

Palo Alto Networks' Unit 42 reveals HazyBeacon, a new Windows backdoor targeting Southeast Asian governments, using AWS Lambda for covert command and control.

It holds the keys to every bucket, server, and secret. And it’s probably misconfigured.

Detectar quién borra archivos en S3 puede ser clave para la seguridad; aquí resumo las mejores formas de lograrlo.

TL;DR: This post shows how to build a fully serverless pipeline where uploads arrive via a REST endpoint, land in an ingest S3 bucket, get…

Introduction

I’ve decided to spend late Q4 and early Q1 2026 focused on building cloud projects to grow my AWS skills. This is my second project in AWS…

Ameriprise Interview Project — Automating IAM User Monitoring with AWS Lambda, S3, and CloudWatch In this project, I worked on securing an AWS environment by focusing on IAM (Identity and Access …

Hackers are weaponizing AWS termination protection to lock defenders out while they mine crypto on hijacked ECS/EC2 resources using a malicious Docker image.

Let’s be honest: most cloud security writing is either boring or dangerously naive. Firewalls and network ports aren’t the threat anymore…