Highlights from Datadog Security Labs in 2023

Datadog Security Labs’ 2023 review highlights open-source tooling (KubeHound for Kubernetes attack-path discovery, MKAT for managed K8s assessments, and HASH as a modular honeypot), broad research (State of Cloud Security, AWS IAM/OIDC risks with real-world remediations, and initial analysis of AWS threat actors), and multiple vulnerability disclosures including a Windows command injection in Kubernetes. The team also launched hands-on educational content (Container security fundamentals, Cloud Security Atlas), presented at major conferences, and plans more cloud attack analyses and practical content in 2024.