A Quiet But Bad Week

Last week in security news: Tailscale now offers network flow logs, Google had a GhostToken flaw, AWS reported an issue with IAM supporting multiple MFA devices, and more!Links:Tailscale now offers network flow logsGoogle had a GhostToken flaw that let attackers backdoor Google accounts.The folks at SADA found a major bug in Google Cloud; apparently it had the potential to expose the private keys for Google Cloud Service AccountsIssue With IAM Supporting Multiple MFA DevicesThis week in Tools: It's been a while since I linked to CloudMapper