Secorvia Blog https://www.secorvia.com/blog/ Cloud security posture, attack paths, blast radius and identity risk, explained by the team that builds Secorvia. en Sat, 03 Oct 2026 09:00:00 GMT Who can walk into your AWS account from outside? https://www.secorvia.com/blog/frontdoor-federated-trust-aws.html https://www.secorvia.com/blog/frontdoor-federated-trust-aws.html OIDC, SAML and cross-account trust let outsiders assume roles in your AWS account. How to find each one, plus a free open source CLI that audits them. noreply@secorvia.com (Rohaan) Sat, 03 Oct 2026 09:00:00 GMT What is an attack path in cloud security? https://www.secorvia.com/blog/what-is-an-attack-path.html https://www.secorvia.com/blog/what-is-an-attack-path.html An attack path is the chain of real hops from an exposed entry point to a sensitive target in your cloud. What the hops are and how tools detect them. noreply@secorvia.com (Rohaan) Sat, 03 Oct 2026 09:00:00 GMT CVSS, EPSS and KEV: three scores, three different questions https://www.secorvia.com/blog/cvss-epss-kev.html https://www.secorvia.com/blog/cvss-epss-kev.html CVSS measures how bad a flaw is, EPSS how likely it is to be exploited, and KEV whether it already has been. How to combine all three in one patch queue. noreply@secorvia.com (Rohaan) Sat, 05 Sep 2026 09:00:00 GMT CIEM: the over-permissioned identity problem https://www.secorvia.com/blog/ciem-explained.html https://www.secorvia.com/blog/ciem-explained.html CIEM finds cloud identities holding more access than they use, and the permission chains that lead to admin. How it works, and how it differs from IAM. noreply@secorvia.com (Rohaan) Fri, 04 Sep 2026 09:00:00 GMT Blast radius: measuring what falls with a single asset https://www.secorvia.com/blog/blast-radius.html https://www.secorvia.com/blog/blast-radius.html Blast radius is what an attacker can reach after taking one cloud resource. How it is computed, how it differs from attack paths, and where it misleads. noreply@secorvia.com (Rohaan) Thu, 03 Sep 2026 09:00:00 GMT Why a CVSS score cannot prioritise your cloud risk https://www.secorvia.com/blog/attack-paths-vs-cvss.html https://www.secorvia.com/blog/attack-paths-vs-cvss.html CVSS rates a flaw before anyone has seen your account. Attack paths rank risk by what an attacker can reach. Where each fits, with a side-by-side table. noreply@secorvia.com (Rohaan) Wed, 02 Sep 2026 09:00:00 GMT What is Cloud Security Posture Management? https://www.secorvia.com/blog/what-is-cspm.html https://www.secorvia.com/blog/what-is-cspm.html CSPM checks cloud configuration against a secure baseline using read-only APIs. What it covers, what it misses, and how it differs from CWPP and CNAPP. noreply@secorvia.com (Rohaan) Tue, 01 Sep 2026 09:00:00 GMT