cloud-audit

项目简介 cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为。 当前仅支持腾讯云与AWS 特性 支持检测腾讯云平台AK/SK利用告警（异常行为） 调用AK/SK创建命令/执行命令监控 调用AK/SK添加子账户/删除子账户监控 调用AK/SK跨region列DB 调用AK/SK跨region列实例 支持检测AWS云平台AK/SK利用告警（基线检测） 调用AK/SK创建用户监控 调用AK/SK列用户监控 调用AK/SK列S3监控 调用AK/SK列DB监控 调用AK/SK提权监控...

Malicious code in google-internal-cloud-audit-security-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a38a595d0fcf5e869dc2cdd939d476de1fbd24253eb6afd383c08c959dfc34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15842 Malicious code in google-internal-cloud-audit-security-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a38a595d0fcf5e869dc2cdd939d476de1fbd24253eb6afd383c08c959dfc34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2026-48725

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using AccountFoundation could ship an AWS account whose CloudTrail / Config audit logs were deletable by any S3-delete-capable principal — while...

SUSE-RU-2026:2816-1 Recommended update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build, python-google-cloud-compute, python-google-cloud-core, python-google-cloud-dns, python-google-cloud-domains, python-google-cloud-iam, python-google-cloud-kms, python-google-cloud-kms-inventory, python-google-cloud-logging, python-google-cloud-run, python-google-cloud-secret-manager, python-google-cloud-service-directory, python-google-cloud-spanner, python-google-cloud-storage, python-google-cloud-vpc-access, python-google-crc32c, python-google-resumable-media, python-googleapis-common-protos, python-grpc-google-iam-v1, python-grpc-interceptor, python-mmh3, python-mypy, python-opentelemetry-resourcedetector-gcp, python-poetry-core, python-proto-plus, python-pytest-asyncio, python-syrupy, python-typed-ast, python-uritemplate, python-dnspython, python-trio, python-websocket-client

This update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build,...

Cloud Audit: Compliance + Automation

Setting your own standard Today’s regulatory environment is incredibly fractured and extensive. Depending on the industry—and the part of the world your business and/or security organization resides in—you may be subject to several regulatory compliance standards. Adding to the complexity, there ...

[SECURITY] Fedora 20 Update: python-pycadf-0.5.1-1.fc20

DMTF Cloud Audit CADF data model...

Government's Cloud Audit Program Falls Behind Schedule

In a speech on Wednesday, Federal Chief Information Officer Steven VanRoekel said that a federal plan for qualifying and providing security audits on private sector cloud providers will become mandatory for any agency that wanted to contact with third party cloud providers, according to a report ...