Cybersecurity researchers have disclosed two new attack techniques against infrastructure-as-code (IaC) and policy-as-code (PaC) tools like HashiCorp's Terraform and Open Policy Agent (OPA) that leverage dedicated, domain-specific languages (DSLs) to breach cloud platforms and exfiltrate data. "Since these are hardened languages with limited capabilities, they're supposed to be more secure than
source https://thehackernews.com/2024/11/cybersecurity-flaws-in-iac-and-pac.html
Monday, November 25, 2024
Cybersecurity Blind Spots in IaC and PaC Tools Expose Cloud Platforms to New Attacks
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box