Infrastructure-as-Code (IaC) is great. It allows teams to deploy infrastructure quickly in a consistent and repeatable manner and when coupled with a proper CI/CD process
Author: Romain Aviolat
Spring4Shell – A Deep Understanding (CVE-2022–22965)
(this blog-post was initially published by our colleague Mouad Kondah on Medium) On March 29, 2022, a critical Remote Code Execution vulnerability CVE-2022-22965 was disclosed
Zero Trust Access to Kubernetes
Over the past few years, Kudelski Security’s engineering team has prioritized migrating our infrastructure to multi-cloud environments. Our internal cloud migration mirrors what our end clients
Hacking Arista appliances for fun and profit
I have been playing a lot with Arista hardware lately, as we’re mainly using their products in our data center’s as Tor or Spine switches,
OpenSSH jump-host and file-transfer
This article was inspired by a previous post on my personal blog: https://www.freeture.ch/?p=815 Intro OpenSSH is a great tool, everybody knows that (even Microsoft). It’s
first steps with Arista networks
Intro We were looking for a fast layer 3 switch, I mean really fast. It should not only be able to switch frames at 10GbE line-rate
Kudelski Security Research 