Catch Me If You Can: The Race to Detect and Prevent Cloud Misconfigurations
Explore cloud misconfigurations, their risks, and prevention strategies. Learn to detect issues using Panoptica and safeguard against data breaches in today's fast-paced tech landscape.
An Insider's Guide to Cloud Computing - Interview with David Linthicum
Insightful discussion on cloud computing's future, covering industry secrets, multi-cloud strategies, security management, and strategic adoption guidelines. Offers expert predictions and practical advice for navigating the evolving tech landscape.
Cloud Native Security - Cell-Based Architecture and Kubernetes
Explore Cell-Based Architecture for scalable, secure multi-tenant Kubernetes environments. Learn practical applications, real-world case studies, and how to enhance security, isolation, and performance using open-source technologies.
Fortifying AI Security in Kubernetes with Confidential Containers - CoCo
Explore confidential computing for AI model protection in Kubernetes using Confidential Containers (CoCo). Learn how CoCo enhances security for AI/ML workloads and provides memory protection for foundational platforms.
IAM Confused: Analyzing 8 Identity Breach Incidents
Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for better identity and access management in cloud environments.
Cloudy With a Chance of Security
Explore cloud security challenges and best practices with expert insights on protecting data, managing access, and mitigating risks in modern cloud environments.
Breaking the Cloud - A Tale of Three Breaches
Explore three real-world cloud security breaches, analyzing attack vectors, vulnerabilities, and lessons learned to enhance your organization's cloud defenses and incident response strategies.
Dangling Resources Abuse on Cloud Platforms - Identifying and Analyzing Real-Life Hijacks
Unveils real-life cloud resource hijacks, revealing unexpected attacker strategies and developing novel detection methods. Analyzes 20,904 hijacked resources, exposing prevalent abuse tactics and attacker infrastructures.
The Anatomy of Cloud Attacks
Uncover cloud attackers' tactics and mindsets through honeypot analysis. Learn key defense strategies against threats like Headcrab Kinsing and Teamtnt in this insightful session on cloud security.
CloudSec Hero to Zero - Building Efficient and Sustainable Cloud Security Programs
Learn proven techniques for triaging and remediating cloud security issues, and build an efficient, sustainable program to tackle thousands of unprioritized findings and inadequate infrastructure.
All You Need Is Guest - Securing EntraID Guest Accounts
Explore how EntraID guest accounts can pose security risks, bypass limitations, and gain unauthorized access to corporate resources. Learn steps to harden configurations and prevent attacks.
Deep Dive Into AWS Instance Metadata - NahamCon 2024
Explore AWS instance metadata across EC2, ECS, and EKS, from basics to advanced container scenarios, enhancing your ability to maximize bug impact in cloud environments.
Exposed PII in Public RDS Snapshots - Risks and Remediation
Discover how public RDS snapshots can accidentally expose sensitive data and PII. Learn to prevent, detect, and remediate risks associated with this Amazon service feature.
Deconstructing Control Plane Compromise Attacks in Cloud Environments
Explore cloud control plane compromise attacks, learn how hackers exploit architectural flaws, and discover strategies for identifying and mitigating risks in your cloud environment.
Responding to Threats in AWS Linux and Kubernetes Environments
Explore real-life attack techniques in AWS Linux and Kubernetes environments and learn efficient cloud incident response strategies through automation and enhanced visibility.
Keylime: Securing Your Slice of the Cloud
Explore scalable cloud trust attestation with Keylime, leveraging TPM technology for secure identity bootstrapping and system integrity monitoring in untrusted remote infrastructures.
A Platform-Agnostic Approach to Securing Workloads
Explore a standardized approach to securing diverse workloads using SPIRE and Envoy, creating a zero-trust foundation with mutual authentication between microservices.
Securing the Cloud - 101 Introduction
Explore cloud security essentials, including risks, vendor governance, data protection, and best practices for secure cloud adoption and management.
Pragmatic Cloud Security for InfoSec Practitioners - Track 201
Explore pragmatic cloud security strategies for InfoSec practitioners, covering encryption, service-based approaches, data management, and scalability in modern cloud environments.
Hijacking Label Switched Networks in the Cloud
Explore MPLS network vulnerabilities, attack vectors, and security recommendations for cloud environments. Learn about VPNs, BGP hijacking, and service provider architectures.
Achieving Faster ATO on Cloud Native Applications with DISA STIG Certified Kubernetes
Accelerate ATO and FedRAMP approval for cloud-native apps using a DISA STIG certified Kubernetes stack. Learn how integrated, secure container orchestration can speed up value delivery for demanding sectors.