The Curious Incidents with DNS in the Sandbox at Escape-Time
What the Agent attempted with DNS in the Hugging Face–OpenAI Intrusion Incident of July 2026
More issues
IAM Roles Anywhere – now for everyone with Let's Encrypt
This post is an accompaniment to my talk at fwd:cloudsec Denver. It contains the SystemD files, Trust Policy for the IAM Role that was referred to, and other miscellaneous scripts. Towards the end, under FAQ, it has answers to questions that were either raised in the talk's
Obfuscating outbound traffic via a Suricata "firewall"
For a few years now, some cloud service providers have resorted to using open-source Suricata network analysis software inline to detect and block malicious outbound traffic. This, of course, works on known indicators. It is worth quoting from this article that, "By the time an IOC has been
Living-off-the-land Dynamic DNS for Route 53
I was visiting the matter of dynamic DNS after more than a decade. Had memories of complex configuration files, having to supply login credentials to ddns scripts, finding out in the field that the home router had been failing to update the DNS record for a while, and domain registrars