Security Industry Call-to-Action - We Need a Cloud Vulnerability Database
Explore cloud vulnerabilities in AWS, GCP, and Azure, and learn why a cloud-specific vulnerability database is crucial for improved security in the evolving cloud landscape.
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.
Can You Roll Your Own SIEM
Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.
Serverless Security - Attack & Defense
Explore serverless security vulnerabilities and defenses across AWS, Azure, and GCP. Learn about dependency poisoning, validation errors, and insecure defaults with practical demos and prevention strategies.
Breaking and Securing Cloud Platforms
Comprehensive analysis of cloud security vulnerabilities, real-world attack scenarios, and best practices for securing cloud deployments. Covers data exposure, access control issues, and attacker exploitation techniques.
All Your Cloud Are Belong to Us - Hunting Compromise in Azure
Explore cloud security challenges, focusing on Azure infrastructure vulnerabilities and shared responsibility in IaaS, PaaS, and SaaS environments. Learn detection and mitigation strategies for emerging threats.
Cyber in a World of Cloud
Explore cloud security challenges and advantages, including threat adaptation, data-driven defense, and self-protection mechanisms in hyperscale environments.
Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure
Explore Azure Log Analytics exploitation as a covert channel, uncovering potential security threats in cloud logging infrastructure and learning mitigation strategies.
So You Think You Can Secure Your Cloud - Red Team Engagements in GCP
Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.
Fantastic AWS Attacks and Where to Find Them
Explore AWS attack techniques and build effective cloud defenses using the ATT&CK framework. Learn to create and operationalize detections for enhanced AWS infrastructure security.
The Bucket List - Experiences Operating S3 Honeypots
Insights from operating S3 honeypots: Discover who's hunting for exposed buckets, their methods, and how to protect your AWS assets through monitoring and defensive strategies.
Building an Effective Intrusion Detection Program
Learn to build an effective intrusion detection program using affordable tools. Covers cloud apps, endpoints, network security monitoring, and crowdsourced incident response to catch breaches quickly.
The GCP Metadata API - Security Considerations, Vulnerabilities, and Remediations
Explore GCP Metadata API security: risks, attacks, defenses, and best practices. Learn about service accounts, Kubernetes, and Cloud Build implications for your organization's cloud infrastructure.
All Your Containers Are Belong to Us
Explore container orchestration security risks, focusing on exposed management nodes and APIs. Learn implications, recommendations, and see demonstrations of potential exploits in popular platforms.
How to Kill an AWS Access Key
Learn to eliminate static AWS Access Keys using Security Token Service, SAML, and Identity Providers for enhanced cloud security and short-lived credentials.
Injecting Security at the Cloud Edge
Explore secure hybrid cloud deployments using Apache Traffic Server, Athenz, and Waflz. Learn options for Secure Edge integration, policy enforcement, and lessons from real-world implementation at Yahoo.
Why Security Is the Biggest Benefit of Using the Cloud
Explore how cloud migration enhances application and data security at scale, discussing modern challenges, event-driven security, and AWS guardrails for improved organizational security posture.
Practical Attacks Against Attribute-based Encryption
Explore practical attacks on attribute-based encryption, examining vulnerabilities in multi-authority schemes and their implications for cloud security and IoT applications.
Detecting Malicious Cloud Account Behavior - A Look at the New Native Platform Capabilities
Explore new native cloud platform capabilities for detecting suspicious account activity, including attack lifecycle, detection methods, and practical examples from major providers.
Detecting Credential Compromise in AWS
Learn techniques to detect and mitigate credential compromise in AWS, a widespread concern for cloud-based companies. Explore various attacker motives and outcomes.
Attacking and Defending the Microsoft Cloud - Office 365 & Azure AD
Explore common attacks on Microsoft Cloud, learn effective defenses, and gain insights into securing Office 365 and Azure AD environments. Applicable to other cloud providers.