Blog Entries

21. 07. 2026 Patrick Di Fazio Offensive Cloud Security, Offensive Security, Red Team, SEC4U

What Cloud Security Posture Management Actually Checks, and What It Doesn’t

Cloud Security Posture Management describes a category of tools that inspect cloud environments for configuration problems like public storage, overly broad IAM permissions, disabled logging, and missing encryption. The category includes open-source projects like Prowler and ScoutSuite, as well as commercial platforms. Despite different pricing models and interfaces, they solve the same underlying problem in…

Read More
04. 06. 2026 Patrick Di Fazio Offensive Security, Red Team, SEC4U

Purple Teaming as a Continuous Improvement Model

In cybersecurity, the gap between what we think we can detect and what we actually detect is often wider than we expect. Tools are configured, rules are written, playbooks are drafted, and yet, when a real attack unfolds, the telemetry is incomplete, the alerts are noisy, and the response is slower than it should be….

Read More

Archive