Cumulus
Cumulus is a cloud-oriented version of Elevation of Privilege![A set of cards with threats like our deployment artifacts contain secrets that can be extracted](/images/blog/img/2023/cumulus-800w.jpeg)
Cumulus, from TNG Technology Consulting, is a cloud-centered version of Elevation of Privilege. Their suits are “access + secrets”, “delivery”, “recovery” “monitoring” and “resources.” I think its a good group, and I think they’ve done a good job defining threats. They seem likely enough in the real world, broad enough that they’ll provoke a discussion, and they written clearly.