Shanraq.org Shanraq.org

Cybersecurity — analysis on Shanraq.org

Latest stories

IT

Storm-3168 Azure Attack: How Cloud Resources Vanished in Seven Minutes

Microsoft has detailed a Storm-3168 attack on an Azure environment in which compromised service principals performed reconnaissance and launched more than 150 dangerous operations. The main destructive sequence lasted about seven minutes. Here is what was deleted, how a secret may have leaked and which controls actually limited the damage. The article ends with five checks for organizations that use cloud services and workload identities.

IT

Privacy is freedom: on personal data

The commonest argument against caring about privacy is that you have nothing to hide. It sounds reasonable, which is what makes it dangerous. Privacy is not about hiding: you close the bathroom door not because you are committing a crime in there. The danger is not one fact but a profile built from thousands.