IAM wildcards in Terraform: `"Action": "*"` grants everything to everything. We check for this. It fails audits and it shouldn't be hard to spot. 🔍 #AWS #Terraform #SecurityEngineering
IAM wildcards in Terraform: `"Action": "*"` grants everything to everything. We check for this. It fails audits and it shouldn't be hard to spot. 🔍 #AWS #Terraform #SecurityEngineering
Every waiver lives in code. Who approved it, why they did, when it expires. No searching Slack. No lost emails. Exception governance that actually scales. 🔍
#DevOps #SecurityEngineering…
@dinabridge.bsky.socialStrong security starts with dependable engineering.
Reliable log ingestion, well-tuned detection rules, and clear investigation workflows help security teams focus on real threats instead of chasing noisy alerts.
#Cybersecurity #SecurityEngineering #ElasticSecurity #DinaBridge
@filesigsec.bsky.socialIf your title has "engineer" and AI is in production, this is your track.
AISecENG Study Guide www.amazon.com/dp/B0GXWJ99YC
If this helped, share it with someone who's building or buying AI this year.
#AISecurity #SecurityEngineering #AISecENG #DevSecOps #CyberSecurity
@honganfiredoor.bsky.socialWhen explosion creates internal overpressure, the door opens to release pressure, attenuate blast shockwaves and protect the main building structure. The door can reset after pressure subsides.
#SecurityEngineering
#HazardousMaterialWarehouseDoorsWindows
Paste your Terraform plan. Get a security and compliance letter grade in seconds—no signup, no storage. In-memory evaluation. See what DSalvus finds. 🔍
#DevOps #Terraform #SecurityEngineering
Every waiver has a story: who approved it, why they approved it, when it expires. DSalvus records all three—in code. No more "who said yes to this?" 🔍
#DevOps #SecurityEngineering #Infrastructure
IAM wildcards in Terraform—when `"Action": "*"` shows up in your policy, that's the moment auditors squint. DSalvus checks for it. 🔐
#SecurityEngineering #Terraform #AWS
paste your terraform plan → get a security & compliance grade in seconds. no signup, no storage. evaluate what you're about to merge. 🔍
#Terraform #DevOps #AWS #SecurityEngineering
@dinabridge.bsky.socialPassword attacks aren’t slowing down.
Microsoft reported an increase from 579 password attacks per second in 2021 to 7,000 per second in 2024, more than a 12× increase.
#Cybersecurity #IdentitySecurity #IAM #CloudSecurity #SecurityEngineering
@firstpasslab.bsky.socialOne dashboard is not one security control. OAuth, device identity, secure boot, video integrity, retention, and admin roles still need separate evidence. #Cisco #Meraki #Axis #PhysicalSecurity #SecurityEngineering #NetEng
@sugataai.bsky.socialOpenAI allegedly knew about an attack on RubyGems but chose silence over disclosure. That is a critical failure of security ethics and transparency. #SecurityEngineering sugataai.com/blog/fragmen...
@mitcdh.auSafety analysis often asks what happens when something fails. Security must also ask: what happens when nothing fails, but the system is deliberately weaponised to do the wrong thing? The success of a malicious act can be more dangerous than obvious failure.