Shelly Raban

122 posts

Shelly Raban

@shellyraban

Security research team lead @TenableSecurity

Bergabung Kasım 2021

612 Mengikuti277 Pengikut

Tweet Disematkan

Shelly Raban@shellyraban·26 Mar

It was a pleasure! Big thanks to the Cloud Village team for having me!

Cloud Village@cloudvillage_dc

Huge thanks to @shellyraban for showing us how to turn attacker behavior into detections that matter! 👏 From leaked credentials to forensic logging, Shelly proved that understanding the adversary is the best way to strengthen real defenses. Thanks for joining us! ☁️ @OneRSAC

English

202

Shelly Raban me-retweet

Cloud Village@cloudvillage_dc·25 Mar

Starting in 15 mins: @shellyraban is live at #CloudVillage breaking down how to track attacker behavior in managed cloud services without the risk! 🛡️ Catch the reality of cloud deception live in Room 204! 🔍 📍 Moscone South, Level 2 | @OneRSAC #RSAC

GIF

English

102

Shelly Raban@shellyraban·14 Mar

Can’t wait! 😍

Cloud Village@cloudvillage_dc

How do you leak a cloud key without losing your budget? 🔑 Join @shellyraban at Cloud Village inside the Moscone Center to learn the "Hard Way" of running cloud honeypots—from authentic IAM roles to Bedrock & SageMaker forensics. See you at @OneRSAC! 🛡️ #CloudSecurity #RSAC

English

Shelly Raban me-retweet

Google VRP (Google Bug Hunters)@GoogleVRP·12 Mar

Our Google Cloud VRP researchers don't miss! 🔥 Check out @terminatorLM's latest Looker research uncovering 9 novel cross-tenant vulns in Looker. See how it was done: 👇

Liv Matan@terminatorLM

🫣LeakyLooker: 1 Cross-tenant vulnerability? How about 9? (1/10)🧵 I’m incredibly proud to share LeakyLooker. I discovered 9 novel cross-tenant vulnerabilities in Google Cloud’s Looker Studio that broke fundamental design assumptions. Here is how I broke tenant isolation: 👇

English

7.7K

Shelly Raban@shellyraban·30 Eyl

@terminatorLM Amazing stuff!!!

English

Liv Matan@terminatorLM·30 Eyl

😶‍🌫️ Big news! The Gemini Trifecta: I discovered a "Trifecta" of three new vulnerabilities (now remediated) in Google Gemini Cloud Assist, Search Model, and its browsing tool. Full technical details: tenable.com/blog/the-trife…

English

1.5K

Shelly Raban@shellyraban·3 Tem

@_sigil @fwdcloudsec Totally!

English

Katie Knowles@_sigil·3 Tem

@shellyraban @fwdcloudsec Thanks, Shelly! Hope our paths cross again soon. 😁

English

Katie Knowles@_sigil·2 Tem

Thank you for a great week, @fwdcloudsec!! So many fantastic conversations and sessions. See you next year!

English

528

Shelly Raban@shellyraban·19 Mar

#AI is revolutionizing the cloud—but at what cost to security? Our team has been working on the NEW Cloud AI Risk Report that uncovers the top risks security teams should be aware of as AI-driven cloud adoption advances. Get the report here →... ow.ly/mguA1062UkH

English

132

Shelly Raban@shellyraban·6 Mar

@oridavid123 @BlueHatIL Melech!!

Deutsch

Ori David@oridavid123·5 Mar

Excited to share that I'll be presenting my research on VBS enclaves at the upcoming @BlueHatIL ! Registration is now open—hope to see you there! microsoftrnd.co.il/bluehatil/conf…

English

419

Shelly Raban me-retweet

Tenable@TenableSecurity·4 Oca

It is with profound sadness that we announce the passing of our Chairman and Chief Executive Officer, Amit Yoran (@ayoran), after a battle with cancer. Today’s press release can be read here. ⬇️ tenable.com/press-releases…

English

184

55.6K

Shelly Raban@shellyraban·26 Kas

@dagrz This is awesome!!

English

538

Daniel Grzelak@dagrz·26 Kas

Shodan for AWS is here!! You know those side projects you never finish? Well I started this one in October 2021 and it's finally finished. Well it won't ever be done, but it's available for anyone to use. Enter an account ID into awseye.com and see what it can find out about it. More details: plerion.com/blog/what-do-h…

English

197

745

66.6K

Shelly Raban@shellyraban·26 Kas

Was such an amazing experience! Super interesting talks, 10/10 setup, and an awesome community🫶

Women In Cybersecurity Community Association@wicca_NL

Who watches the Watchmen? Let's steal credentials with Shelly Raban from policy-as-code engines at #WICCON2024. youtube.com/watch?v=nZX3lp… #CyberSecurity #WomenInTech

English

156

Shelly Raban me-retweet

The Hacker News@TheHackersNews·25 Kas

Researchers have uncovered new attack techniques targeting infrastructure-as-code (IaC) & policy-as-code (PaC) tools like HashiCorp's Terraform & Open Policy Agent (OPA), posing a severe risk to cloud platforms. Learn how this works: thehackernews.com/2024/11/cybers… #cybersecurity

English

10.6K

Shelly Raban@shellyraban·25 Kas

Thanks for featuring my DSLs attack techniques research! Read all about it in our blog- tenable.com/blog/the-dark-…

CloudSecList@CloudSecList

📖 CloudSecList Issue 265 just got released, w/ content from @iann0036 @trailofbits @PushSecurity @tenablesecurity @tracebit_com @SentinelOne and more! cloudseclist.com/issues/issue-2…

English

890

Shelly Raban@shellyraban·12 Kas

You don’t want to miss this one! tenable.com/webinars/expos…