Security News

Cybersecurity news aggregator

☁️
INFO News Reddit r/netsec

Cloud Deception Management Platform (Open-source Cloud Canaries)

  • What: A security admin is sharing their open-source project, Coalmine, a canary management platform for cloud environments.
  • Impact: Security admins can deploy canary tokens in cloud environments to detect exposed source code and credential testing.
Read Full Article →

Hi folks, I wanted to share a project of mine and get some feedback from the community. Coalmine is a canary management platform I've built to let security admins deploy canary tokens (and objects) easily in there cloud environments. Currently its early alpha and supports S3, GCS, AWS IAM, and GCP Service accounts . The tool provides a webui, CLI and API, allowing you to integrate it with your custom tooling (when its production ready) Example use for API: have your CICD pipelines request an canary token to embed in code, so you can Identify when the source has been exposed and attacks are testing credentials Coalmine - Github submitted by /u/John_Earle [link] [comments]

Share this article