Tag Archive | Marco Lancini's Blog

| Follow @lancinimarco | Subscribe to CloudSecList

2016

Needle V0.1.1 Released

iOS 9: Effective Jailbreak

Needle V0.0.4 Released

Needle Status Update

A quick intro to Needle

Introducing Needle

2017

Docker + Consul + Vault: A Practical Guide

Needle meets Jenkins: how to include Needle in your CI pipeline

Needle v1.0.0 released: new native agent and support for iOS 10

2018

Critical Vulnerability in Kubernetes API Server (CVE-2018-1002105)

Red Teaming Mind Map from The Hacker Playbook 3

My Arsenal of Cloud Native (Security) Tools

Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933)

So I Heard You Want to Learn Kubernetes

Offensive Infrastructure: Introduction to Consul

Offensive ELK: Elasticsearch for Offensive Security

Robtex-Go: Go Client for the Robtex API

Introducing GoScan (aka a reason to learn Go)

Burp Pro as a Docker Container

2019

Cross Account Auditing in AWS and GCP

Introducing CloudSecList.com

Deploy Your Own Kubernetes Lab

Offensive Infrastructure: the HashiStack

2020

Semgrep for Cloud Security

Introducing CloudSecDocs.com

Domain-Wide Delegation of Authority in GSuite

Tracking Moving Clouds: How to continuously track cloud assets with Cartography

So I Heard You Want to Learn Kafka

The Current State of Kubernetes Threat Modelling

Building a Serverless Mailing List in AWS

My Blogging Stack

Remote Development with a Chromebook in 2020

Mapping Moving Clouds: How to stay on top of your ephemeral environments with Cartography

2021

Remotely Access your Kubernetes Lab with Cloudflare Tunnel

Introducing k8s-lab-plz: A modular Kubernetes Lab

Weekly Digests to Increase Visibility and Transparency

Automated GDrive Backups with ECS and S3

Automated Github Backups with ECS and S3

On Establishing a Cloud Security Program

Automating Cartography Deployments on Kubernetes

Kubernetes Lab on Baremetal

Security Logging in Cloud Environments - GCP

A Quick Look at GKE Autopilot (in 15 minutes)

Security Logging in Cloud Environments - AWS

2022

Serverless Emails with Cloudflare Email Routing

Cyber Security Career Pathways

Serverless Ad Blocking with Cloudflare Gateway

What to look for when reviewing a company's infrastructure

CVE-2022-0847 (aka Dirty Pipe): What does it mean for defenders

Docker on MacOS via minikube (2022 edition)

2023

Introducing CloudSecGPT: Your Go-To AI for Cloud Security Insights

Migrating to Google Workspace: Solving Email Routing Challenges

Migrating Terraform state from Terraform Cloud to S3

Zero Trust Access to Private Webapps on AWS ECS with Cloudflare Tunnel

2024

Building an AppRunner on EC2 with Cloudflare Zero Trust Access

The CloudSec Engineer is released today!

The CloudSec Engineer - We have a release date!

2025

You Don't Need a Vendor to Automate Security Questionnaires

Transform Years of Content Into a Conversational Knowledge Base

2026

Automating Security Operations with AI: Triaging Renovate PRs

Redesigning CloudSecList with Claude Design

My Claude Code Setup (2026 Edition)

ai

Automating Security Operations with AI: Triaging Renovate PRs

Redesigning CloudSecList with Claude Design

My Claude Code Setup (2026 Edition)

You Don't Need a Vendor to Automate Security Questionnaires

Transform Years of Content Into a Conversational Knowledge Base

Introducing CloudSecGPT: Your Go-To AI for Cloud Security Insights

appsec

Automating Security Operations with AI: Triaging Renovate PRs

aws

You Don't Need a Vendor to Automate Security Questionnaires

Building an AppRunner on EC2 with Cloudflare Zero Trust Access

Migrating Terraform state from Terraform Cloud to S3

Zero Trust Access to Private Webapps on AWS ECS with Cloudflare Tunnel

CVE-2022-0847 (aka Dirty Pipe): What does it mean for defenders

Automated GDrive Backups with ECS and S3

Automated Github Backups with ECS and S3

Automating Cartography Deployments on Kubernetes

Security Logging in Cloud Environments - AWS

Semgrep for Cloud Security

Introducing CloudSecDocs.com

Tracking Moving Clouds: How to continuously track cloud assets with Cartography

Building a Serverless Mailing List in AWS

My Blogging Stack

Mapping Moving Clouds: How to stay on top of your ephemeral environments with Cartography

Cross Account Auditing in AWS and GCP

azure

CVE-2022-0847 (aka Dirty Pipe): What does it mean for defenders

Introducing CloudSecDocs.com

backups

Automated GDrive Backups with ECS and S3

Automated Github Backups with ECS and S3

cartography

Automating Cartography Deployments on Kubernetes

Tracking Moving Clouds: How to continuously track cloud assets with Cartography

Mapping Moving Clouds: How to stay on top of your ephemeral environments with Cartography

cloud

You Don't Need a Vendor to Automate Security Questionnaires

Transform Years of Content Into a Conversational Knowledge Base

Building an AppRunner on EC2 with Cloudflare Zero Trust Access

The CloudSec Engineer is released today!

The CloudSec Engineer - We have a release date!

Introducing CloudSecGPT: Your Go-To AI for Cloud Security Insights

Migrating to Google Workspace: Solving Email Routing Challenges

Migrating Terraform state from Terraform Cloud to S3

Zero Trust Access to Private Webapps on AWS ECS with Cloudflare Tunnel

Serverless Emails with Cloudflare Email Routing

Cyber Security Career Pathways

Serverless Ad Blocking with Cloudflare Gateway

What to look for when reviewing a company's infrastructure

CVE-2022-0847 (aka Dirty Pipe): What does it mean for defenders

Remotely Access your Kubernetes Lab with Cloudflare Tunnel

Introducing k8s-lab-plz: A modular Kubernetes Lab

Automated GDrive Backups with ECS and S3

Automated Github Backups with ECS and S3

On Establishing a Cloud Security Program

Automating Cartography Deployments on Kubernetes

Security Logging in Cloud Environments - GCP

A Quick Look at GKE Autopilot (in 15 minutes)

Security Logging in Cloud Environments - AWS

Semgrep for Cloud Security

Introducing CloudSecDocs.com

Domain-Wide Delegation of Authority in GSuite

Tracking Moving Clouds: How to continuously track cloud assets with Cartography

So I Heard You Want to Learn Kafka

Building a Serverless Mailing List in AWS

My Blogging Stack

Mapping Moving Clouds: How to stay on top of your ephemeral environments with Cartography

Cross Account Auditing in AWS and GCP

Introducing CloudSecList.com

My Arsenal of Cloud Native (Security) Tools

cloudflare

You Don't Need a Vendor to Automate Security Questionnaires

Transform Years of Content Into a Conversational Knowledge Base

Building an AppRunner on EC2 with Cloudflare Zero Trust Access

Migrating to Google Workspace: Solving Email Routing Challenges

Zero Trust Access to Private Webapps on AWS ECS with Cloudflare Tunnel

Serverless Emails with Cloudflare Email Routing

Serverless Ad Blocking with Cloudflare Gateway

Remotely Access your Kubernetes Lab with Cloudflare Tunnel

Building a Serverless Mailing List in AWS

My Blogging Stack

cloudsecbooks

The CloudSec Engineer is released today!

The CloudSec Engineer - We have a release date!

Cyber Security Career Pathways

cloudseclist

Redesigning CloudSecList with Claude Design

Transform Years of Content Into a Conversational Knowledge Base

Building a Serverless Mailing List in AWS

Introducing CloudSecList.com

culture

Weekly Digests to Increase Visibility and Transparency

development

Automating Security Operations with AI: Triaging Renovate PRs

My Claude Code Setup (2026 Edition)

Docker on MacOS via minikube (2022 edition)

Building a Serverless Mailing List in AWS

My Blogging Stack

Remote Development with a Chromebook in 2020

docker

Building an AppRunner on EC2 with Cloudflare Zero Trust Access

Zero Trust Access to Private Webapps on AWS ECS with Cloudflare Tunnel

CVE-2022-0847 (aka Dirty Pipe): What does it mean for defenders

Docker on MacOS via minikube (2022 edition)

Introducing k8s-lab-plz: A modular Kubernetes Lab

Introducing CloudSecDocs.com

Deploy Your Own Kubernetes Lab

Offensive Infrastructure: the HashiStack

My Arsenal of Cloud Native (Security) Tools

So I Heard You Want to Learn Kubernetes

Offensive Infrastructure: Introduction to Consul

Offensive ELK: Elasticsearch for Offensive Security

Burp Pro as a Docker Container

Docker + Consul + Vault: A Practical Guide

gcp

CVE-2022-0847 (aka Dirty Pipe): What does it mean for defenders

Automated GDrive Backups with ECS and S3

Automating Cartography Deployments on Kubernetes

Security Logging in Cloud Environments - GCP

A Quick Look at GKE Autopilot (in 15 minutes)

Semgrep for Cloud Security

Introducing CloudSecDocs.com

Domain-Wide Delegation of Authority in GSuite

Tracking Moving Clouds: How to continuously track cloud assets with Cartography

Mapping Moving Clouds: How to stay on top of your ephemeral environments with Cartography

Cross Account Auditing in AWS and GCP

infrastructure

Transform Years of Content Into a Conversational Knowledge Base

Building an AppRunner on EC2 with Cloudflare Zero Trust Access

Migrating to Google Workspace: Solving Email Routing Challenges

Migrating Terraform state from Terraform Cloud to S3

Zero Trust Access to Private Webapps on AWS ECS with Cloudflare Tunnel

Serverless Emails with Cloudflare Email Routing

Serverless Ad Blocking with Cloudflare Gateway

Remotely Access your Kubernetes Lab with Cloudflare Tunnel

Introducing k8s-lab-plz: A modular Kubernetes Lab

Automated GDrive Backups with ECS and S3

Automated Github Backups with ECS and S3

Kubernetes Lab on Baremetal

Security Logging in Cloud Environments - GCP

Security Logging in Cloud Environments - AWS

Domain-Wide Delegation of Authority in GSuite

Tracking Moving Clouds: How to continuously track cloud assets with Cartography

Building a Serverless Mailing List in AWS

My Blogging Stack

Mapping Moving Clouds: How to stay on top of your ephemeral environments with Cartography

Cross Account Auditing in AWS and GCP

Deploy Your Own Kubernetes Lab

Offensive Infrastructure: the HashiStack

Offensive Infrastructure: Introduction to Consul

kafka

Introducing CloudSecDocs.com

So I Heard You Want to Learn Kafka

kubernetes

What to look for when reviewing a company's infrastructure

Docker on MacOS via minikube (2022 edition)

Remotely Access your Kubernetes Lab with Cloudflare Tunnel

Introducing k8s-lab-plz: A modular Kubernetes Lab

On Establishing a Cloud Security Program

Automating Cartography Deployments on Kubernetes

Kubernetes Lab on Baremetal

A Quick Look at GKE Autopilot (in 15 minutes)

Semgrep for Cloud Security

Introducing CloudSecDocs.com

The Current State of Kubernetes Threat Modelling

Introducing CloudSecList.com

Deploy Your Own Kubernetes Lab

Critical Vulnerability in Kubernetes API Server (CVE-2018-1002105)

My Arsenal of Cloud Native (Security) Tools

So I Heard You Want to Learn Kubernetes

pentest

CVE-2022-0847 (aka Dirty Pipe): What does it mean for defenders

Cross Account Auditing in AWS and GCP

Critical Vulnerability in Kubernetes API Server (CVE-2018-1002105)

Red Teaming Mind Map from The Hacker Playbook 3

My Arsenal of Cloud Native (Security) Tools

Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933)

Offensive Infrastructure: Introduction to Consul

Offensive ELK: Elasticsearch for Offensive Security

Robtex-Go: Go Client for the Robtex API

Introducing GoScan (aka a reason to learn Go)

Burp Pro as a Docker Container

serverless

Serverless Emails with Cloudflare Email Routing

Serverless Ad Blocking with Cloudflare Gateway

What to look for when reviewing a company's infrastructure

strategy

The CloudSec Engineer is released today!

The CloudSec Engineer - We have a release date!

Cyber Security Career Pathways

What to look for when reviewing a company's infrastructure

Weekly Digests to Increase Visibility and Transparency

On Establishing a Cloud Security Program

vault

Offensive Infrastructure: the HashiStack

Docker + Consul + Vault: A Practical Guide

About

Hi, I'm Marco Lancini. I'm a Director of Security, C|CISO, and author of "The CloudSec Engineer", writing about security strategy, technical leadership, and cloud security. [read more]