Links:

The Challenges of Assessing Kubernetes clusters for PCI Compliance. 
Tailscale released a post titled What we learned (and can share) from passing our SOC 2 Type II audit that is absolutely worth your time and attention.
Our friends at Wiz discovered a vulnerability in Oracle Cloud’s security where you could mount other customers' EBS volumes simply by asking the API to do so. 
From the Mouth of AWS Horse: Announcing an update to IAM role trust policy behavior 
In the world of tools, AWS has launched its rolesanywhere-credential-helper