<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Cloud Security on lcz's Blog</title><link>https://book.llcczz.org/tags/cloud-security/</link><description>Recent content in Cloud Security on lcz's Blog</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Tue, 19 Nov 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://book.llcczz.org/tags/cloud-security/index.xml" rel="self" type="application/rss+xml"/><item><title>SSRF to Cloud Metadata: Stealing IMDS Credentials</title><link>https://book.llcczz.org/posts/ssrf-cloud-metadata-imds/</link><pubDate>Tue, 19 Nov 2024 00:00:00 +0000</pubDate><guid>https://book.llcczz.org/posts/ssrf-cloud-metadata-imds/</guid><description>Why a server-side request forgery in a cloud workload is usually a full credential compromise, and how the three major providers differ.</description></item></channel></rss>