# orderedItems[].object.content
New post - keyless access to AWS from GCP. Handy to avoid IAM users and long-lived access keys.

https://www. richtman.au/blog/keyless-aws-a ccess-gcp/

#GCP #AWS #Oauth #OIDC #Oauth2 #Cloud

# orderedItems[].object.content
"By default, Kubernetes assigns IPv4 addresses to your Pods and services. Instead of assigning IPv4 addresses to your Pods and services, you can configure your cluster to assign IPv6 addresses to them. Amazon EKS doesn’t support dual-stacked Pods or services, even though Kubernetes does. As a result, you can’t assign both IPv4 and IPv6 addresses to your Pods and services."

What? 😮

https://docs.aws.amazon.com/eks/latest/userguide/cni-ipv6.html

#aws #IPv4 #IPv6

# orderedItems[].object.ephemeral.metadata[].description
Learn how to deploy an IPv6 cluster and nodes with Amazon EKS for assigning IPv6 addresses to Pods and services instead of IPv4, leveraging IP prefix delegation and the latest Amazon VPC CNI plugin.

# orderedItems[].object.content
New 📚 Release! Generative AI Application Patterns with AWS: Volume 1 by Yudho Ahmad Diponegoro

Building generative AI application is not only about LLM choice and prompt engineering, but also about the well-architected cloud solution.

Find it on Leanpub!

Link: https://leanpub.com/genai-application-patterns-aws-vol1

#books #AWS #softwarearchitecture #ai #genai #programming #cloudcomputing

# orderedItems[].object.ephemeral.metadata[].twitterTitle
Generative AI Application Patterns with AWS

# orderedItems[].object.ephemeral.metadata[].ogTitle
Generative AI Application Patterns with AWS

# orderedItems[].object.content
Roave's expert software engineers have availability for new projects! From extra hands to modernizing your stack, we bring experience and passion to every project. Could we help with your next project?

✉️ info@roave.com

#PHP #Java #Typescript #Software #Development #Legacy #AWS

# orderedItems[].object.content
To my fellow software developers (not specifically DevOps or Ops), has anyone done any of the *Cloud Certs" at any level (AWS, GCP, etc)? If so, could you fill out this poll please?

I hear about them all the time but outside of specific Ops roles I wonder if they're actually used and useful.

And honestly any experience or thoughts or them or any other certs would be greatly appreciated too. I'm so curious in the industry and people in it actually find them useful.

#cloud #certs #engineering #software #aws #gcp #azure

# orderedItems[].object.content
Cloud computing does not mean write Lambdas for everything, and everything must be serverless. One can really phone it in by converting their app to a Lambda, or simply migrate a Docker image and put it in front of an Application Load Balancer.

#app #application #loadbalancer #aws #cloud #computing #serverless #lambda #docker #phone

# orderedItems[].object.source.content
Cloud computing does not mean write Lambdas for everything, and everything must be serverless. One can really phone it in by converting their app to a Lambda, or simply migrate a Docker image and put it in front of an Application Load Balancer.

#app #application #loadbalancer #aws #cloud #computing #serverless #lambda #docker #phone

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].description
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.ephemeral.metadata[].ogDescription
A server created by @mrhamel due to not liking the Mastodon software.

# orderedItems[].object.content
re:Invent 2025: AWS and Security Vendors Unveil New Products and Capabilities https://www. securityweek.com/reinvent-2025-aws-and-security-vendors-unveil-new-products-and-capabilities/ #securityproducts #CloudSecurity #cloudsecurity #re:Invent2025 #AWS

# orderedItems[].object.ephemeral.metadata[].twitterTitle
re:Invent 2025: AWS and Security Vendors Unveil New Products and Capabilities 

# orderedItems[].object.ephemeral.metadata[].description
AWS and cybersecurity vendors have made several security-related announcements at the cloud giant’s re:Invent 2025 event. 

# orderedItems[].object.ephemeral.metadata[].ogDescription
AWS and cybersecurity vendors have made several announcements at the cloud giant’s re:Invent 2025 event. 

# orderedItems[].object.ephemeral.metadata[].ogTitle
re:Invent 2025: AWS and Security Vendors Unveil New Products and Capabilities 

# orderedItems[].object.ephemeral.metadata[].twitterDescription
AWS and cybersecurity vendors have made several announcements at the cloud giant’s re:Invent 2025 event. 

# orderedItems[].object.content
Databricks is hiring Senior Engineering Manager - Release and Deployment Infrastructure

🔧 #aws #azure #docker #gcp #kubernetes #terraform #engineeringmanager #seniorengineer
🌎 San Francisco, California
⏰ Full-time
🏢 Databricks

Job details https://jobsfordevelopers.com/jobs/sen ior-engineering-manager-release-and-deployment-infrastructure-at-databricks-com-oct-22-2024-21a658?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring

# orderedItems[].object.ephemeral.metadata[].twitterTitle
Senior Engineering Manager - Release and Deployment Infrastructure at Databricks

# orderedItems[].object.ephemeral.metadata[].description
Databricks is hiring Senior Engineering Manager - Release and Deployment Infrastructure

# orderedItems[].object.ephemeral.metadata[].ogDescription
Databricks is hiring Senior Engineering Manager - Release and Deployment Infrastructure

# orderedItems[].object.ephemeral.metadata[].ogTitle
Senior Engineering Manager - Release and Deployment Infrastructure at Databricks

# orderedItems[].object.ephemeral.metadata[].twitterDescription
Databricks is hiring Senior Engineering Manager - Release and Deployment Infrastructure

# orderedItems[].object.content
AWS Lambda Managed Instances: Serverless, only with servers!

Would like to see some app scenarios with detailed cost breakdown.

https://aws.amazon.com/blogs/aws/intro ducing-aws-lambda-managed-instances-serverless-simplicity-with-ec2-flexibility/

#aws

# orderedItems[].object.ephemeral.metadata[].twitterTitle
Introducing AWS Lambda Managed Instances: Serverless simplicity with EC2 flexibility | Amazon Web Services

# orderedItems[].object.ephemeral.metadata[].ogDescription
Run Lambda functions on EC2 compute while maintaining serverless simplicity—enabling access to specialized hardware and cost optimizations through EC2 pricing models, with AWS handling all infrastructure management.

# orderedItems[].object.ephemeral.metadata[].ogTitle
Introducing AWS Lambda Managed Instances: Serverless simplicity with EC2 flexibility | Amazon Web Services

# orderedItems[].object.ephemeral.metadata[].twitterDescription
Run Lambda functions on EC2 compute while maintaining serverless simplicity—enabling access to specialized hardware and cost optimizations through EC2 pricing models, with AWS handling all infrastructure management.

# orderedItems[].object.content
Is anyone seeing this going to be at the #aws re:invent #conference next week? #programming #Devops #ai #reinvent

# orderedItems[].object.content
Can I ask software architects, for those in cloud and before that era.

Should we ever start with microservices for a new project that is an untested market?

#programming #coding #aws #gcp #azure

# orderedItems[].object.content
Have you ever thought about the stuff you bough on the recent days? Are really a good or it's a commodity? Even better, are you sure that we have a market running on the global level?

If any of these words have you interested, read the blog.

https://jeferson.me/blog/2025/11/28/go d-is-dead

#Algorithms #Addiction #AttentionEconomy #AWS #Commodities #Consumerism #Economy #GhostInTheShell #Homelab #Linux #Monopolies #Philosophy #Privacy #SelfHosting #Software #Subscription

# orderedItems[].object.ephemeral.metadata[].description
We lost, God is Dead, and there is little we can do alone. But maybe... Just Maybe...

# orderedItems[].object.ephemeral.metadata[].ogDescription
We lost, God is Dead, and there is little we can do alone. But maybe... Just Maybe...

# orderedItems[].object.ephemeral.metadata[].twitterDescription
We lost, God is Dead, and there is little we can do alone. But maybe... Just Maybe...

# orderedItems[].object.content
Billions in profit. Can't calculate a rough estimate or even display a progress bar. Thanks Amazon!

#aws #devops #iac #linux #programming

# orderedItems[].object.content
Defending Against Sha1-Hulud: The Second Coming

A new variant of the NPM supply chain attack, dubbed Sha1-Hulud, has emerged with enhanced capabilities. Unlike its predecessor, this attack executes in the preinstall phase, targeting popular packages such as Postman, Zapier, and AsyncAPI. The malware harvests credentials across AWS, Azure, and GCP, and establishes persistence through GitHub Actions. It creates a self-hosted runner named 'SHA1HULUD' and adds a workflow with an injection vulnerability. The attack's impact extends beyond the development environment, potentially allowing lateral movement across cloud infrastructures. Immediate actions recommended include removing compromised packages, revoking and regenerating tokens and credentials, and enforcing hardware-based MFA for developer accounts.

Pulse ID: 69285c73103a9c177746610e
Pulse Link: https://otx.alienvault.com/pulse/69285 c73103a9c177746610e
Pulse Author: AlienVault
Created: 2025-11-27 14:13:07

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #Azure #Cloud #CyberSecurity #ELF #GitHub #InfoSec #MFA #Malware #NPM #OTX #OpenThreatExchange #RAT #SupplyChain #Vulnerability #bot #AlienVault

# orderedItems[].object.ephemeral.metadata[].description
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.content
Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems

The Shai-hulud 2.0 campaign features an advanced malware variant that steals credentials and secrets from major cloud platforms and developer services. It automates the backdooring of NPM packages maintained by victims, enabling rapid propagation across the software supply chain. The malware targets AWS, GCP, and Azure credentials, as well as NPM tokens and GitHub authentication. It creates malicious GitHub Actions workflows for command-and-control and secret exfiltration. The campaign also leverages cloud secret management services and implements destructive failsafes. Its sophisticated tactics allow for stealthy compromise of developer ecosystems, potentially impacting thousands of downstream users.

Pulse ID: 69285c74af9f622adc6b66d1
Pulse Link: https://otx.alienvault.com/pulse/69285 c74af9f622adc6b66d1
Pulse Author: AlienVault
Created: 2025-11-27 14:13:08

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #Azure #BackDoor #Cloud #CyberSecurity #GitHub #ICS #InfoSec #Malware #NPM #OTX #OpenThreatExchange #RAT #SupplyChain #bot #AlienVault

# orderedItems[].object.ephemeral.metadata[].description
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.content
ShadowV2 Casts a Shadow Over IoT Devices

A new Mirai variant called ShadowV2 has been observed spreading through IoT vulnerabilities during a global AWS disruption. The malware targeted multiple countries and industries worldwide, exploiting vulnerabilities in devices from vendors like DD-WRT, D-Link, Digiever, TBK, and TP-Link. ShadowV2 is designed for IoT devices and uses a XOR-encoded configuration to connect to a C2 server for receiving DDoS attack commands. The malware supports various attack methods, including UDP floods, TCP-based floods, and HTTP-level floods. This incident highlights the ongoing vulnerability of IoT devices and the need for timely firmware updates, robust security practices, and continuous threat monitoring.

Pulse ID: 6927ffd2068d6127f3387514
Pulse Link: https://otx.alienvault.com/pulse/6927f fd2068d6127f3387514
Pulse Author: AlienVault
Created: 2025-11-27 07:37:54

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #DDoS #DoS #HTTP #InfoSec #IoT #Malware #Mirai #OTX #OpenThreatExchange #RAT #TCP #UDP #Vulnerability #bot #AlienVault

# orderedItems[].object.ephemeral.metadata[].description
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.content
Why struggle with stale environment variables? 🌍🔐

Envilder streamlines .env management by syncing secrets directly with AWS SSM. Automate updates, maintain consistency across teams, and eliminate risky manual sharing of sensitive data. Ideal for cloud-native workflows and CI/CD setups.

#DevOps #AWS #SecOps

🔗 Project link on #GitHub 👉 https://github.com/macalbert/envilder

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

# orderedItems[].object.ephemeral.metadata[].twitterTitle
GitHub - macalbert/envilder: 🚀 Envilder is a CLI that securely centralizes your environment variables from AWS SSM as a single source of truth

# orderedItems[].object.ephemeral.metadata[].description
🚀 Envilder is a CLI that securely centralizes your environment variables from AWS SSM as a single source of truth - macalbert/envilder

# orderedItems[].object.ephemeral.metadata[].ogDescription
🚀 Envilder is a CLI that securely centralizes your environment variables from AWS SSM as a single source of truth - macalbert/envilder

# orderedItems[].object.ephemeral.metadata[].ogTitle
GitHub - macalbert/envilder: 🚀 Envilder is a CLI that securely centralizes your environment variables from AWS SSM as a single source of truth

# orderedItems[].object.ephemeral.metadata[].twitterDescription
🚀 Envilder is a CLI that securely centralizes your environment variables from AWS SSM as a single source of truth - macalbert/envilder

# orderedItems[].object.content
Shipped some cool #Ansible things in @codeenigma's code deployment tool, ce-deploy, today. Multiple #Docker container image builds in one pass, multi-container #AWS ECS Task Definitions and automated 'composer audit' for #composer based #PHP applications like #Drupal and #Mautic, to be automatically warned of security updates.

https://gitlab.com/code-enigma/ce-depl oy

# orderedItems[].object.ephemeral.metadata[].description
Ansible based tools deploying code to Linux servers and containers to AWS infrastructure.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Ansible based tools deploying code to Linux servers and containers to AWS infrastructure.

# orderedItems[].object.ephemeral.metadata[].twitterDescription
Ansible based tools deploying code to Linux servers and containers to AWS infrastructure.

# orderedItems[].object.content
How NTLM is being abused in 2025 cyberattacks

NTLM, a legacy authentication protocol, remains prevalent in Windows environments despite known vulnerabilities. Threat actors continue to exploit both old and newly discovered flaws in NTLM for credential theft, privilege escalation, and lateral movement. Recent vulnerabilities like CVE-2024-43451, CVE-2025-24054, and CVE-2025-33073 have been actively exploited in various campaigns. Attacks involve hash leakage, coercion-based techniques, credential forwarding, and man-in-the-middle approaches. Threat groups like BlindEagle and Head Mare have leveraged these vulnerabilities to distribute malware and target specific regions. To mitigate risks, organizations are advised to disable or limit NTLM usage, implement message signing, enable Extended Protection for Authentication, and monitor NTLM traffic closely.

Pulse ID: 69270a1260d022cc94c9f705
Pulse Link: https://otx.alienvault.com/pulse/69270 a1260d022cc94c9f705
Pulse Author: AlienVault
Created: 2025-11-26 14:09:22

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberAttack #CyberAttacks #CyberSecurity #InfoSec #Malware #OTX #OpenThreatExchange #RAT #Windows #bot #AlienVault

# orderedItems[].object.ephemeral.metadata[].description
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

# orderedItems[].object.content
AWS CDK fun fact. Running `cdk deploy` or `cdk destroy` along with the flag `--no-execute` does in fact execute.

Amazing!

#aws #software #devops