Celidor
  • Blog
  • About
  • People
  • News
  • TALKS
  • Contact

Preventing subdomain takeover with OWASP Domain Protect

9/1/2023

0 Comments

 
Join me at OWASP Global AppSec Dublin to hear how an OVO Energy bug bounty program led to the creation of OWASP Domain Protect and prevented subdomain takeover
Picture
0 Comments

Domain Protect is now an OWASP project

21/12/2022

0 Comments

 
Domain Protect is now officially an OWASP project!
Picture
Paul demonstrated prevention of subdomain takeovers using Domain Protect, at the OWASP London Chapter Meetup in December 2022. A video of the presentation is now online.
0 Comments

3 AWS security improvements to do tomorrow

19/8/2022

0 Comments

 
Discover 3 actionable security improvements for AWS at the DevSecOps London Meetup on 24 August.
Picture
​Ditch the bastions, delete that privileged CI/CD IAM user, and stop CloudFront bypass. Do it now!
In each case, I'll explore the security impact, demonstrate a practical solution, and provide open-source infrastructure-as-code examples.
0 Comments

Microsoft's new Cybersecurity Architect Expert certification

23/7/2022

1 Comment

 
In April 2022, Microsoft announced its first ever expert level security certification - Microsoft Certified: Cybersecurity Architect. To be awarded the certification, one of the requirements is to pass the new SC-100 exam, which became generally available July 2022.
Picture
I took the SC-100 exam while it was in its Beta phase in May. Click "Read More" to see how I prepared.

Read More
1 Comment

SANS CloudSecNext 2022

28/6/2022

0 Comments

 
My recent SANS CloudSecNext 2022 talk and live demo now online!
0 Comments

Zero Trust with Microsoft Azure

1/5/2022

2 Comments

 
Chatting with Ashish Rajan on his Cloud Security Podcast about Zero Trust using Microsoft 365 and Azure security services
2 Comments

SANS CloudSecNext Summit 2022

5/4/2022

0 Comments

 
I'll be giving the first public presentation and live demo of our open source tool Domain Protect at SANS CloudSecNext virtual summit 2022, 3 - 4 May, free to register here.
Picture
0 Comments

First in-person talk since Security BSides 2019

20/3/2022

0 Comments

 
My first in-person talk since Security BSides 2019!

​Which cloud provider has the best security services and features - AWS, Azure or GCP? Find out at (ISC)² SECURE London with demos of all three platforms, opinionated award ceremonies, and time for questions or controversy
Picture
0 Comments

Automated takeover of vulnerable subdomains

24/1/2022

0 Comments

 
We’ve updated our open source tool Domain Protect to include optional automated takeover of vulnerable subdomains, see my blog post OVO vs Bug Bounty researchers - round 2
Picture
0 Comments

CIISec Masterclass - AWS, Azure and GCP security - now online

15/1/2022

1 Comment

 
The CIISec Masterclass "AWS, Azure and GCP security" is now online:
1 Comment
<<Previous

    Author

    Paul Schwarzenberger is a Cloud Security Architect and DevSecOps specialist

    Archives

    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    January 2022
    November 2021
    September 2021
    July 2021
    March 2021
    July 2020
    June 2020
    February 2020
    December 2019
    November 2019
    October 2019
    June 2019
    May 2019
    April 2019
    March 2019
    February 2019
    January 2019
    November 2018
    October 2018
    September 2018
    August 2018

    Categories

    All
    Cloud Security
    DevSecOps

    RSS Feed


Contact us via email at info@celidor.net 

© 2020 Celidor Limited. All Rights Reserved.

Celidor Limited

Company Number: 08870661


  • Blog
  • About
  • People
  • News
  • TALKS
  • Contact