{"uuid": "484f8407-ee1f-4ee9-878e-6652fefbcdc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1350", "type": "seen", "source": "https://t.me/cissp/2456", "content": "Threat Research,Cloud Security,\nMalware analysis :\n1. SUNSHUTTLE Second-Stage Backdoor\nhttps://www.fireeye.com/blog/threat-research/2021/03/sunshuttle-second-stage-backdoor-targeting-us-based-entity.html\n\n2. Anatomy of an Exploit: RCE with CVE-2020-1350 SIGRed\nhttps://www.graplsecurity.com/post/anatomy-of-an-exploit-rce-with-cve-2020-1350-sigred\n\n3.A\u00a0Blazing fast Security Auditing tool for Kubernetes\nhttps://github.com/vchinnipilli/kubestriker\ud83d\ude0a\n\n4. How to delegate management of identity in AWS SSO\nhttps://aws.amazon.com/ru/blogs/security/how-to-delegate-management-of-identity-in-aws-single-sign-on\n\n5. rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, private resources\nhttps://github.com/goldfiglabs/rpCheckup\n\n6.GoldMax, GoldFinder, and Sibot:\nAnalyzing NOBELIUM\u2019s layered persistence\ud83d\ude01\nhttps://www.microsoft.com/security/blog/2021/03/04/goldmax-goldfinder-sibot-analyzing-nobelium-malware", "creation_timestamp": "2026-09-02T01:04:51.647424Z"}