Maxime Coquerel

Welcome #KubeCon! 🤩

What a ride at #CloudNativeRejekts NA 2025 in Atlanta! ⚡
Deep-tech talks, AI breakthroughs, and hardcore #Kubernetes security insights, all powered by an incredible community.
Full recap 👉 zigmax.net/cloud-native-r…
Next stop: #KubeCon 🚀 #CloudNative #CloudSecurity

Ready!! 🤩 #Rejekts2025

On my way to #KubeCon + #CloudNativeCon North America! 🛫

Super excited to be part of #DevFest Montreal 2025! Can’t wait to connect, learn, and share ideas with the community. 🚀

3 WEEKS AWAY! 🚀

Cloud Native @rejekts.io is the essential FREE, in-person event on Nov 8 in Atlanta, GA. Explore hidden technical gems that you won't want to miss.

Get your free ticket ➡️ cloud-native.rejekts.io

Orbit is a CLI tool that unifies the discovery of and access to the managed #Kubernetes clusters across different cloud providers (AWS EKS, Azure AKS, and Google GKE). It adds newly discovered clusters to your existing kubeconfig.

gitlab.com/RMJx1/orbit

// Source: #Kubernative Telegram channel

KubeCon + CloudNativeCon North America 2025 Co-Located Event Deep Dive: KyvernoCon This is the very first KyvernoCon! While Kyverno has been part of the CNCF since November 2020, and has had a strong presence at past KubeCon events through policy as code focused talks…

KyvernoCon is here! 🎉
An inaugural event for the #policyascode community, co-located with #KubeCon + #CloudNativeCon NA 2025.

Connect with contributors, hear real-world stories, and see how Kyverno is scaling beyond Kubernetes.

🛠️ Join us → www.cncf.io/blog/2025/09...

#Kyverno #CNCF #CloudNative

Excited to join #BSidesMontreal today!

🤩🤩 ! #CNCF Meetup #QuebecCity!

Kubernetes Escape Room Kubernetes Escape Room: A tool that analyzes Kubernetes Pod manifests to identify potential container escape vulnerabilities and provides security recommendations for mitigation.

#Kubernetes Escape Room partyrock.aws/u/bernardoor...

Data Exfiltration through S3 Server Access Logs - Hacking The Cloud Exfiltrate data via S3:GetObject and S3 server access logs.

Ever thought of using S3 server access logs for data exfiltration? If you control an IAM identity with `s3:GetObject`, you could receive log details including denied requests alongside the data you aim to exfiltrate. It's a unique take on cloud security worth exploring. Learn more:

Breaking Boundaries - Kubernetes Namespaces and multi-tenacy blog.amberwolf.com/blog/2025/se... #cloudsecurity #kubernetessecurity

Kubernetes 1.34: Top Security Features & Enhancements - ARMO Improve your cloud security with the latest upgrades in Kubernetes 1.34, from mutual TLS and token hardening to CEL-based admission policies

Kubernetes 1.34 security features www.armosec.io/blog/kuberne... #KubernetesSecurity #CloudSecurity

Backdoor on S3 using bucket policy While exploring the labs provided by Cybr, I came across one focused on Backdoor execution on S3 — Backdooring an S3 Bucket via its Bucket…

Backdoor on s3 policy #cloudsecurity medium.com/@akarshad428...

Another ECS Privilege Escalation Path ECS has a range of known privilege escalation vectors. We discovered another which relies on using functionality designed for the ECS agent to self-register a compromised EC2 and override a task defin...

labs.reversec.com/posts/2025/0...

Want more Platform Engineering content? Our friends @kubecrash.bsky.social are hosting a free, virtual conference on Tuesday, September 23rd! Get practical insights from speakers like Dima Shevchuk (Grammarly) & Lisa Shissler Smith (formerly Netflix).

Register now: kubecrash.io

Build a Small Language Model (SLM) From Scratch At this current phase of AI evolution, any model with fewer than 1 billion parameters can be called a small language model. If we look at…

Build a small language model from scratch #AI #SLM medium.com/@shravankoni...

GitHub - NetSPI/ATEAM Contribute to NetSPI/ATEAM development by creating an account on GitHub.

ATEAM: Azure Tenant Enumeration and Attribution Module #cloudsecurity github.com/NetSPI/ATEAM

skybound.link/2025/08/defc... #Kubernetes #cloudsecurity #defcon33

Want to help make Kubernetes better? If you run multiple clusters, the community would like to learn from you! Check out the survey!

ECScape: Understanding IAM Privilege Boundaries in Amazon ECS ECScape: Understanding IAM Privilege Boundaries in Amazon ECS

#ECScape www.sweet.security/blog/ecscape...

EC2 Privilege Escalation Through User Data - Hacking The Cloud How to escalate privileges on an EC2 instance by abusing user data.

Explore how misusing EC2 user data can lead to privilege escalation. If you have `ec2:ModifyInstanceAttribute` permissions, you can execute custom scripts as root on EC2 instances. This involves modifying user data and leveraging cloud-init to execute scripts at boot. Details here:

GitHub - keisku/kubectl-explore: A better kubectl explain with the fuzzy finder A better kubectl explain with the fuzzy finder. Contribute to keisku/kubectl-explore development by creating an account on GitHub.

Kubectl-explorer github.com/keisku/kubec...

Cloud Native Rejekts NA (Atlanta) 2025 Schedule, talks and talk submissions for Cloud Native Rejekts NA (Atlanta) 2025

📣We're excited to announce that #Rejekts will take place on Nov. 8 as a one-day event before KubeCon Atlanta🌆

📜CFP is now open👉🏽 tinyurl.com/e6bkfpd8

🔔We look forward to receiving your rejekted proposals until 11th Aug 23:59 PM ET!

GitHub - alex-ilgayev/MCPSpy: MCP Monitoring with eBPF MCP Monitoring with eBPF. Contribute to alex-ilgayev/MCPSpy development by creating an account on GitHub.

MCPSpy - Real-time monitoring for Model Context Protocol communication using eBPF github.com/alex-ilgayev... #AISecurity #CloudSecurity

GitHub - ovh/shai: shai is a coding agent, your pair programming buddy that lives in the terminal. Written in rust with love <3 shai is a coding agent, your pair programming buddy that lives in the terminal. Written in rust with love <3 - ovh/shai

Petit tool #AI du jour, made by #OVHcloud (merci @aurelievache.bsky.social pour la découverte): github.com/ovh/shai

Steal IAM Credentials and Event Data from Lambda - Hacking The Cloud Leverage file read and SSRF vulnerabilities to steam IAM credentials and event data from Lambda.

Discover common vulnerabilities in AWS Lambda that allow attackers to access IAM credentials and event data. These incidents often exploit file read and SSRF vulnerabilities. Learn how attackers can leak sensitive information and how to protect your environments. Read more:

Humbled and excited to be renewed as a Microsoft MVP for the 9th consecutive year! 🚀 This recognition belongs to the incredible tech community that keeps pushing me to grow and give back. Let’s keep building, sharing, and securing together! #MicrosoftMVP #MVPBuzz #Azure #CloudSecurity #CloudNative

www.offensai.com/blog/the-fut... #AISecurity #CloudSecurity