Topic

Serverless Security

Security of event-driven functions and managed runtimes, where code executes on provider-operated infrastructure and is reached through triggers, queues and API events rather than long-lived servers.

Current clusters

security1 publisher

Microsoft maps stale DNS and commit rights into one cloud web app attack surface

The new cloud web applications threat matrix sorts eleven ATT&CK tactics for managed runtimes and serverless code, starting with assets an app team rarely owns, such as dead DNS records and linked source repositories.

Publishers:microsoft.com

Reality

Evidence74
Adoption: Insufficient
Hype gap+6
Incentives58
Confidence67