Главная
Study mode:
on
1
Welcome
2
Nate Warfield
3
AWS
4
MQTT
5
Owntracks
6
Vulnerability Details
7
SMB v1x Play
8
Wannacry Drops
9
What Causes Downtime
10
Cloud Marketplaces
11
The Year of Crypto
12
Building correlations
13
Customization
14
Cloud Tenants
15
The Cool Stuff
16
Takeaways
Description:
Explore the evolving landscape of cloud security in this 59-minute conference talk from BruCON Security Conference. Delve into the tactics used by attackers to compromise cloud networks, focusing on Azure vulnerabilities. Learn about hunting, identifying, and remediating compromised systems in Azure's vast network of exposed hosts. Discover how lessons learned from these incidents have been applied to enhance security in Azure Marketplace. Gain insights into the default security configurations of Azure and AWS Marketplace images, and understand the challenges faced in securing cloud environments. Examine case studies involving MongoDB, Redis, Elastic, Hadoop, SMBv1, IIS6.0, and Samba compromises. Explore topics such as ransomware monetization, the disappearance of traditional security perimeters, and proactive measures for cloud security. Conclude with a call to action for teams working on Azure security offerings and key takeaways for improving cloud security posture.

All Your Cloud Are Belong To Us – Hunting Compromise in Azure

BruCON Security Conference
Add to list