Manage Your Attack Surface on a Budget
Discover cost-effective strategies for managing your attack surface, exploring internal challenges, homegrown solutions, and IoT considerations. Learn about Scout and its applications in cybersecurity.
From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes
Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.
Cloud Configure Review - The New Internal Pentest at DefCamp
Explore cloud configuration review as a modern internal penetration testing approach, focusing on its importance, methodologies, and impact on cybersecurity strategies.
Secure Them All - From Silicon to the Cloud
Explorez les dernières avancées en sécurité informatique, du silicium au cloud, présentées lors de la conférence DefCamp 2019, l'événement majeur en cybersécurité d'Europe centrale et orientale.
Breaking Formation - From an Error Message to Internal AWS Infrastructure
Explore a critical AWS CloudFormation vulnerability, its impact on cloud security, and the disclosure process. Gain insights into cloud infrastructure vulnerabilities and future research directions.
Defending Enterprise Cloud Infrastructure - A Hacker's Perspective
Explore cloud infrastructure security from a hacker's perspective. Learn overlooked attack vectors, defense mechanisms, and critical baseline practices to protect enterprise cloud environments at scale.
Securing Microservices at API Gateway Using Cloud Native Solutions
Learn to secure microservices using cloud-native solutions at the API gateway level. Explore authorization techniques, Open Policy Agent integration, and best practices for robust microservice security.
Cloud as an Attack Vector
Explore how cybercriminals exploit cloud services as attack vectors, including shadow IT risks and malware delivery. Learn about emerging threats and security implications in the rapidly evolving cloud landscape.
Scale Hacking to Secure Your Cloud and Beyond
Learn tips and tricks for scaling bug hunting in cloud environments, enhancing your cybersecurity skills and improving your ability to find vulnerabilities efficiently.
Security Open Source Tools in Cloud Native
Explora vulnerabilidades en contenedores y herramientas de código abierto para DevSecOps en entornos cloud native. Aprende mejores prácticas y técnicas para detectar errores de configuración y mejorar la seguridad.
Security Enhanced on Groups Automation - AKA SEGA
Automatización de gestión de grupos de seguridad en AWS para Mercado Libre: de trabajo manual a controles automáticos. Solución escalable para múltiples cuentas y desarrolladores, manteniendo control sobre cambios en reglas.
Manejo de Secretos en Modelos GitOps en la Nube
Aprende a gestionar secretos en modelos GitOps en la nube utilizando herramientas open source. Descubre cómo almacenar, acceder y desplegar secretos de forma segura en Git y Kubernetes sin infraestructura dedicada.
SAP HANA Under the Hood - Attacks and Countermeasures
Exploración de vulnerabilidades y ataques a SAP HANA, incluyendo XSS y ejecución remota de código. Aprende a prevenir y detectar amenazas en sistemas SAP para proteger información crítica empresarial.
AWS Well-Architected Framework - Security Pillar
Guía de estrategias para diseñar sistemas seguros en la nube, abordando gestión de identidades, detección, protección de infraestructura, protección de datos y respuesta a incidentes en AWS.
Step by Step AWS Cloud Hacking
Explore real-life AWS cloud exploitation techniques, from zero access to full privilege escalation and internal network access via custom AWS Client VPN, using practical concepts and tools.
Internet-Scale Analysis of AWS Cognito Security
Comprehensive analysis of AWS Cognito security configurations, revealing widespread vulnerabilities in identity pools and resource access. Includes methodology, findings, and recommendations for secure implementation.
DIAL - Did I Just Alert Lambda?
Explore DIAL, a stateless monitoring system for AWS that provides visibility on internal threats and security misconfigurations across multiple accounts, leveraging Lambda for scalability and easy deployment.
Cloud Is Easy? Try to Manage Misconfigurations - No CVE's Land on 100k Instances in Mixed Environments in Real Time
Automatización de seguridad en entornos cloud complejos: estrategias para gestionar configuraciones erróneas en tiempo real en infraestructuras heterogéneas a gran escala.
Pwning Cloud Vendors with Untraditional PostgreSQL Vulnerabilities
Explore PostgreSQL vulnerabilities in cloud services, including isolation issues and potential cross-account access attacks. Learn about real-world impacts and recent demonstrations of database security flaws.
Let's Play Hide and Seek in the Cloud
Explore cloud security vulnerabilities and learn effective strategies for identifying and mitigating hidden threats in cloud environments.
My App Is Running With Kubernetes - Am I Aware of the Potential Exploits That I've Embedded Inside?
Explora las vulnerabilidades potenciales en aplicaciones Kubernetes y aprende prácticas de DevSecOps para mejorar la seguridad en entornos cloud nativos.