Most recents (3)

How a simple web-app assessment lead to complete #AzureAd tenant takeover 🤯
🧵 👇
#Azure #AzureKubernetesService #aks #Kubernetes #KubernetesSecurity #k8s #bugbounty #bugbountytips #bugbountytip #DevSecOps

1. Poorly-designed file upload functionality lead to RCE
2. Turned out the app was running in a container managed by #AzureKubernetesService (#AKS)
3. #Container was mounting a service account with permissions to deploy #pods in the same namespace

4. I deployed a new pod with hostPath root volume. Deployment was not blocked by any security policy. #Pod got deployed
5. I exec-ed into the pod's #container and escaped it through its hostPath volume. #privesc to the #AKS node succeeded!

Read 7 tweets

trendwhizo

@trendwhizo

🚨 Check out this @TwitterSpaces on credit insights hosted by @profplum99 (Mike Green) with @Volatilysmile
👇🏽

Esp timely with iTraxx hitting 2 day tightening next to Covid levels when Fed started Corporate Asset purchase peogram.

#credit #swaps #bonds #defaults #CDS

https://twitter.com/profplum99/status/1548860131592417281

🔥 iTraxx ramp

Real possibility of idiosyncratic risk for specific cos exposed to specific factors 👇

#credit #swaps #bonds #defaults #CDS #leveredloans #hedgefunds #pods #creditfunds

I received bunch of DMs about iTraxx.

For understanding the same, please check out this link:

ihsmarkit.com/products/marki…

iTraxx indices are a family of European, Asian and emerging market tradable credit default swap indices.

#credit #swaps #bonds #defaults #CDS #leveredloans

Read 8 tweets