Posts tagged
#iam
6posts
Identity Is the New Perimeter — Lessons from Snowflake, MGM and Scattered Spider
In 2024, UNC5537 stole data from 165 Snowflake customers without exploiting a single vulnerability. In 2023, Scattered Spider paralysed MGM in a 10-minute phone call. This is not a technical attack story — it is the new era where identity is the only perimeter left.
5 min readCloud Security Engineering 2026
Field note series on Cloud Security Engineering — shifting skills, modern tooling, and how engineers navigate a landscape that has converged with AI and agentic systems.
1 min readCloud security baseline — the foundation that needs to be right from day one
Cloud Security Baseline (CSB) is the minimum set of controls that must exist before the first workload deploys. Here's the practical breakdown — from CIS Benchmarks, drift detection, to automatically enforcing baseline.
5 min readBecoming a cloud security engineer in 2026 — skills that have shifted
The role of cloud security engineer has changed more in 2 years than in the 5 years before. Here's an honest breakdown: what's stayed the same, what's changed, and what new skills you need now.
7 min read