Lacework Labs

Our latest Cloud Threat Report is here! We cover: ✅ #CloudSecurity posture ✅ Software supply chain ✅ Runtime threats & more Check it out ➡️ laceworkinc.net/36o72uR

Principal Cloud Security Researcher @35Foss shared his thoughts on how organizations can enhance threat detection in this article from @vmblog on National Insider Threat Awareness Month.⬇️ #NITAM #InsiderThreats

📢new blog! - How Watchdog smuggles malware into your network as uninteresting photos 👇 lacework.com/blog/how-watch… #linux #malware #steg #cryptojacking

Do you like #containers? How about #honeypots? #Linux malware? Check out my ATT&CKCON 3.0 talk, “ATT&CKING Containers in The Cloud” now on YouTube youtu.be/eu6Jo2OQLIo

📢new blog! - Kinsing, Dark.IoT botnet and others targeting Confluence CVE-2022-26134 ITW 👇 lacework.com/blog/kinsing-d… #linux #malware

Great start to @BSidesBoulder with keynote from @35Foss! #bsides #cybersecurity

Checkout #Lacework Labs' latest security advisory on multiple vulnerabilities in Atlassian products! lacework.com/blog/security-…

Cheers🍻 We'll be at the #RSAC this year and we are sponsoring the Expo Pub Crawl! Enjoy a cold one and talk all things #CloudSecurity. Learn more here: laceworkinc.net/3kUoZog

For those of you not headed to @RSAConference, join us either in person or online for @BSidesBoulder! I am honored to be giving the keynote and they have an amazing lineup of speakers and activities planned. Hope to see you there! bsidesboulder.org #BSidesBoulder

Checkout #Lacework Lab's latest security advisory on critical vulnerabilities in #VMWare! lacework.com/blog/security-…

Excited to share that Junyuan and myself will be presenting at @BlackHatEvents USA 2022. If you review our previous attack at DEFCON 29, you will have even more fun with this year's demo :) @Lacework #cloudsecurity #containersecurity #detectionandresponse #DevSecOps #BHUSA

Checkout the latest post from #Lacework Labs on #mirai targeting CVE-2022-1388! lacework.com/blog/malware-t… #malware #cloud

We're finally ready to announce our keynote speaker! Greg Foss (@35Foss) will be presenting the keynote talk for BSides Boulder 2022! Greg is a Principal Cloud Security Researcher focusing on large-scale data science and threat research to help secure cloud environments.

Playing around with exposing projects via #traefik and #ngrok. Shout out to @ngrokHQ for making it dead simple to expose applications for personal projects!

Join Chris Hall and me tomorrow morning as we discuss @laceworklabs latest Cloud Threat Report! info.lacework.com/webinar-cloud-… @Lacework #ThreatIntel #Research #FreeFood

Here's an exclusive preview to what our upcoming podcast episode is all about! 👀 Note the date: 12th April Get ready to know everything on Identity and Access Management in Cloud Security with @35Foss, Principal Cloud Security Researcher at @laceworklabs. #Staytuned

Unsure if you're vulnerable to #SpringShell or #Log4j? Check out @Lacework's @bjornvb script which scans for #Java libraries vulnerable to #Spring4Shell or #Log4Shell github.com/bvboe/java-lib…

@LaceworkLabs digs into one of the more popular vulnerability scanning tools and techniques, and demonstrates how net defenders and analysts can leverage them for threat intelligence purposes. lacework.com/blog/the-oast-…

We are releasing a set of tools for analyzing Project Discovery traffic. Project Discovery accounts for roughly half of all #Log4j attacks, a quarter of attacks observed by @LaceworkLabs, and it has been utilized for #Spring4Shell attacks. laceworkinc.net/37jsO31

It’s time to leverage #DevOps principles and #ShiftLeft to automatically merge indicators. 💥 @laceworklabs is breaking down how to make actionable use of threat intelligence in an AWS environment without overwhelming security engineering teams. lacework.com/blog/actionabl…

It’s time to leverage #DevOps principles and #ShiftLeft to automatically merge indicators. 💥 We are breaking down how to make actionable use of threat intelligence in an AWS environment without overwhelming security engineering teams. lacework.com/blog/actionabl…