Scale Hacking to Secure Your Cloud and Beyond
Learn tips and tricks for scaling bug hunting in cloud environments, enhancing your cybersecurity skills and improving your ability to find vulnerabilities efficiently.
C2, el maestro de las mascotas
Exploración de servidores de Comando y Control (C2), mecanismos para ocultar y detectar puertas traseras, y demostración de control desde sistemas en la nube como Dropbox para evadir detección.
Security Open Source Tools in Cloud Native
Explora vulnerabilidades en contenedores y herramientas de código abierto para DevSecOps en entornos cloud native. Aprende mejores prácticas y técnicas para detectar errores de configuración y mejorar la seguridad.
Security Enhanced on Groups Automation - AKA SEGA
Automatización de gestión de grupos de seguridad en AWS para Mercado Libre: de trabajo manual a controles automáticos. Solución escalable para múltiples cuentas y desarrolladores, manteniendo control sobre cambios en reglas.
Manejo de Secretos en Modelos GitOps en la Nube
Aprende a gestionar secretos en modelos GitOps en la nube utilizando herramientas open source. Descubre cómo almacenar, acceder y desplegar secretos de forma segura en Git y Kubernetes sin infraestructura dedicada.
SAP HANA Under the Hood - Attacks and Countermeasures
Exploración de vulnerabilidades y ataques a SAP HANA, incluyendo XSS y ejecución remota de código. Aprende a prevenir y detectar amenazas en sistemas SAP para proteger información crítica empresarial.
Offensive Azure Security - Red Zone Space
Explore offensive security techniques for Azure, including bypassing authentication, extracting secrets, and gaining control over various Azure services with expert Sergey Chubarov.
AWS Well-Architected Framework - Security Pillar
Guía de estrategias para diseñar sistemas seguros en la nube, abordando gestión de identidades, detección, protección de infraestructura, protección de datos y respuesta a incidentes en AWS.
Building the Next Generation Cloud Infrastructure
Explore the evolution of cloud infrastructure, focusing on GitOps and automation in application lifecycle management. Learn about the shift from monoliths to microservices and its impact on modern development practices.
Step by Step AWS Cloud Hacking
Explore real-life AWS cloud exploitation techniques, from zero access to full privilege escalation and internal network access via custom AWS Client VPN, using practical concepts and tools.
Evaluación de Riesgos de un Proveedor Cloud
Aprende a evaluar la seguridad de proveedores de servicios en la nube y a identificar riesgos en la implementación, basado en estándares NIST y mejores prácticas del sector.
Internet-Scale Analysis of AWS Cognito Security
Comprehensive analysis of AWS Cognito security configurations, revealing widespread vulnerabilities in identity pools and resource access. Includes methodology, findings, and recommendations for secure implementation.
The Unbelievable Insecurity of the Big Data Stack
Explore new attack vectors in Big Data infrastructure layers, addressing the lack of security assessment methodologies and technical resources for this rapidly growing field.
DIAL - Did I Just Alert Lambda?
Explore DIAL, a stateless monitoring system for AWS that provides visibility on internal threats and security misconfigurations across multiple accounts, leveraging Lambda for scalability and easy deployment.
Cloud Is Easy? Try to Manage Misconfigurations - No CVE's Land on 100k Instances in Mixed Environments in Real Time
Automatización de seguridad en entornos cloud complejos: estrategias para gestionar configuraciones erróneas en tiempo real en infraestructuras heterogéneas a gran escala.
Backdooring and Hijacking Azure AD Accounts by Abusing External Identities
Explore Azure AD external identities, their vulnerabilities, and potential exploitation methods for backdooring and hijacking accounts in this informative cybersecurity presentation.
Pwning Cloud Vendors with Untraditional PostgreSQL Vulnerabilities
Explore PostgreSQL vulnerabilities in cloud services, including isolation issues and potential cross-account access attacks. Learn about real-world impacts and recent demonstrations of database security flaws.
Alda's Dynamic Relationship with Clojure
Explore the intertwined history of Alda music programming language and Clojure, discussing their complex relationship, ZeroMQ, Open Sound Control, and native executable creation.
Behind the New York Times Crossword
Explore the tech behind The New York Times Crossword: serverless architecture, Go rewrite, traffic management, and innovation driving the popular puzzle from creation to solving.
Empowering People to Build a Digital Bank
Explore how a digital bank built and scales its microservices architecture, focusing on cloud-based infrastructure, Kubernetes deployment, and custom tooling for high reliability and fast development cycles.
Resurrecting a Recommendations Platform
Explore the implementation of a deep learning model for recommendations while maintaining a legacy platform, focusing on data, machine learning, and A/B testing tiers in cloud migration.