---
title: "A Quiet But Bad Week"
id: "13951"
type: "podcast"
slug: "a-quiet-but-bad-week"
published_at: "2023-05-04T10:00:00+00:00"
modified_at: "2023-10-10T19:24:42+00:00"
url: "https://www.lastweekinaws.com/podcast/aws-morning-brief/a-quiet-but-bad-week/"
markdown_url: "https://www.lastweekinaws.com/podcast/aws-morning-brief/a-quiet-but-bad-week.md"
taxonomy_shows:
  - "Last Week In AWS"
---

About the Author Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure.

[https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305](https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305)

[https://overcast.fm/itunes1466344305/aws-morning-brief](https://overcast.fm/itunes1466344305/aws-morning-brief)

[https://pca.st/AKs0](https://pca.st/AKs0)

[https://podcastaddict.com/podcast/2382583](https://podcastaddict.com/podcast/2382583)

[https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU](https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU)

[https://feeds.transistor.fm/aws-morning-brief](https://feeds.transistor.fm/aws-morning-brief)

## Episode Summary

Last week in security news: Tailscale now offers network flow logs, Google had a GhostToken flaw, AWS reported an issue with IAM supporting multiple MFA devices, and more!

## Episode Show Notes & Transcript

**Links:**

- Tailscale now offers [network flow logs](https://tailscale.com/blog/network-flow-logs/)
- Google had a [GhostToken flaw](https://www.bleepingcomputer.com/news/security/ghosttoken-gcp-flaw-let-attackers-backdoor-google-accounts/) that let attackers backdoor Google accounts.
- The folks at SADA found a major bug in Google Cloud; apparently it had the potential to expose the private keys for [Google Cloud Service Accounts](https://www.techradar.com/news/security-experts-found-a-major-bug-in-google-cloud)
- [Issue With IAM Supporting Multiple MFA Devices](https://aws.amazon.com/security/security-bulletins/AWS-2023-001/)
- This week in Tools: It's been a while since I linked to [CloudMapper](https://github.com/duo-labs/cloudmapper)

 View Full Transcript  Hide Full Transcript

## You might also like

[More Podcast Episodes](https://www.lastweekinaws.com/podcast/aws-morning-brief/)