fwd:cloudsec Courses

Securing Organizations' ML and LLMOps Deployments - A Platform Architect's Journey Onboarding LLM and MLOps Tools

Explore security-focused architectures for ML/LLM deployments across multi-cloud environments, covering AWS/Azure controls, data access patterns, and compliance in regulated industries.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Keeping Your Cloud Environments Secure During a Merger or Acquisition

Discover strategies for securely integrating acquired companies' cloud environments while mitigating unexpected security risks and handling maturity differences.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Breaking AI Agents - Exploiting Managed Prompt Templates to Take Over Amazon Bedrock Agents

Uncover critical security vulnerabilities in AWS Bedrock Agents through prompt injection attacks that enable agent hijacking, unauthorized tool execution, and memory manipulation.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Bypassing AI Security Controls with Prompt Formatting

Discover how to exploit AWS Bedrock Guardrails using prompt formatting techniques to bypass sensitive information filters and learn mitigation strategies for AI security.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Read Between The Logs - A New Vulnerability in Gemini Cloud Assist Proves the Threat is Real

Discover a critical vulnerability in Google's Gemini Cloud Assist where attackers embed malicious prompts in logs to exploit AI tools and deceive defenders into phishing attacks.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Challenges Implementing Egress Controls in a Large AWS Environment

Discover implementation challenges of AWS egress controls at scale, including service limitations, evasion techniques, and unexpected issues when processing terabytes of traffic daily.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Shared-GPU Security Learnings from Fly.io

Discover security challenges and solutions for shared GPU access in cloud environments, covering NVIDIA hardware architecture, PCIe threats, and practical mitigations from Fly.io's experience.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

What Would You Ask a Crystal Ball for AWS IAM? - Demystifying Identity and Access Management Policies

Discover open-source tools to demystify AWS IAM policies, model access control, and answer critical security questions about resource permissions and policy changes.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

I SPy - Rethinking Entra ID Research for New Paths to Global Admin

Uncover a critical Entra ID vulnerability allowing Application Administrator to Global Admin escalation via service principal backdoors and learn mitigation strategies.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

What Do You Mean, 'Resource Not Found?' - Demystifying GCP Error Codes for IR and Detections

Uncover how GCP error codes like "resource not found" can enhance incident response, improve detection rules, and reveal potential reconnaissance attempts in cloud security.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

This Wasn't in the Job Description - Building a Production-Ready AWS Environment from Scratch

Discover how security consultants built a production-ready AWS environment from scratch on a tight budget, covering authentication, organization structure, deployment, and monitoring strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Logs Don't Mean a Thing - Unraveling IaC-Managed Identity Ownership

Discover how to identify identity ownership in Infrastructure-as-Code environments when traditional audit logs fall short, using advanced analysis techniques.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

The Good, the Bad, and the Ugly - Hacking 3 CSPs with 1 Vulnerability

Discover how a single container escape vulnerability in NVIDIA Container Toolkit compromised three major cloud providers, revealing critical security flaws in GPU infrastructure.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

The False Sense of Security - Defense Becoming a Vulnerability

Uncover how Microsoft Entra ID's Privileged Identity Management creates false security and learn to transform procedural formalities into meaningful protection against threats.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

The Duplicitous Nature of AWS Identity and Access Management (IAM)

Uncover AWS IAM's hidden complexities and duplicitous permissions that create security blind spots, exploring how similar actions can bypass monitoring and create vulnerabilities.

• YouTube
• 26 minutes
• Self-Paced
• Free Video