From the Cybr blog
Blue Team
Read practical guides, tutorials, and security research about Blue Team from the Cybr blog.
Browse the archive
Latest articles

AWS Secrets Manager vs. Systems Manager Parameter Store
When should you use AWS Secrets Manager versus Systems Manager Parameter Store to store your secrets in AWS? They have similar functionality, but when does…
Read article
Hands-On Labs Launched October 2025
We added three new Hands-On Labs in October 2025 to Cybr’s growing catalog. Let’s take a look!
Read article
Hands-On Labs Added July 2025
We added four new Hands-On Labs in July to Cybr’s growing catalog. Let’s take a look! AWS Lambda Function URL Enumeration and Exploitation View lab…
Read article
Announcing Our First Azure Course: Getting Started with Microsoft Defender for Cloud
We’ve been focused on AWS security for a while now, but here’s the thing: many of you work in multi-cloud environments or have been asking…
Read article
Hands-On Labs Added May 2025: AWS Blue Teaming
We added three new Hands-On Labs in May to Cybr’s growing catalog. Let’s take a look! Audit the Blast Radius of KMS Keys with Finders…
Read article
Hands-On Labs Added March & April 2025: AWS Blue Teaming
We added two new Hands-On Labs to Cybr’s growing labs catalog, both of which focus on AWS security blue teaming activities. Let’s check them out!…
Read article
Amazon S3 Ransomware Defenses [Cheat Sheet]
Learn how to effectively defend against Amazon S3 Ransomware with our cheat sheet.
Read article
Introducing Learning Paths: Your Roadmap to Cloud Security Skills
We’re excited to announce the launch of our newest feature: Learning Paths – carefully curated collections of courses designed to guide you from foundational knowledge…
Read article
How hackers use this AWS ransomware attack
There’s a “new” ransomware attack being used in AWS that you need to know about. But what is it, how does it work, and how can you defend against it? Let’s find out.
Read article
Get notified when Prowler runs AWS assessments (Part 3)
Set up notifications to let you know when Prowler runs AWS assessments so you can verify findings in your AWS Security Hub dashboard.
Read article