No-Slop Research & Human Thoughts on Security

What if the fix for a privilege-escalation bug were a sentence in the docs?

A confused deputy is nothing more than a privileged intermediary tricked into acting for a caller who lacks the authority itself.

Congratulations, everybody—we might be entering the outer bands of the Vuln-apocalypse storm.

I remember life before phones and Google Maps.

Last week at the [un]prompted conference in San Francisco, the question on everyone's mind was: What happens when Time-to-Exploit reaches zero?

In vulnerability and CVE hunting, you have a search space problem.

In the OAuth 2.0 specification, a scope defines the limits of an access token.

This blog outlines three vulnerabilities with user-associated HMAC keys in Google Cloud.

This post aims to answer the question, 'What can go wrong when using Google Cloud services that leverage Service Agents/P4SAs?'

Service Agents are nothing more than a type of a Service Account.

Recently, a friend admitted to me they were resorting to a 'Hail Mary' approach for their upcoming talk, scribbling notes on notecards like a nervous high school student.

The GCP IAM 101 series is intended to give a brief, succinct overview of essential Google Cloud authorization concepts, answering questions like 'How does Alice gain access to the Bucket?'

Leverage The DeRF for attacker simulations, validating security controls or enhancing cloud detection capabilities.

The cloud has scrambled the context defenders are accustomed to leaning on for understanding the attack surface.

Cybersecurity experts have been quick to respond to the details of the LastPass breach in recent months.