Responding to Sophisticated Ransom Attacks in the Cloud - A Real-World Case Study

Explore a detailed conference talk that delves into a real-world incident response case study of a sophisticated cloud-based ransom attack. Learn from an experienced cybersecurity expert's firsthand account of managing a complex situation where paying the ransom was just the beginning of a larger challenge. Discover the intricate technical details of how the response team conducted data forensics under strict legal deadlines, uncovered expert identity provider impersonation, and revealed a sophisticated privilege escalation exploit that leveraged a Kubernetes vulnerability to gain full administrative access. Gain valuable insights into modern cloud incident response strategies and understand key intelligence for defending against emerging threats in the rapidly evolving cloud security landscape. Drawing from a decade of experience managing global cyber operations, the speaker shares practical takeaways for security practitioners dealing with the increasing sophistication of cloud-based ransom attacks that focus on data exfiltration rather than traditional encryption-based ransomware approaches.