Security Courses

fwd:cloudsec

AWS Presigned URLs: The Good, The Bad, and The Ugly - Security Implications and Attack Prevention

Explore AWS presigned URLs' security implications, attack scenarios, and defensive strategies for protecting cloud resources from unauthorized access and data exfiltration.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Success Criteria for Cloud Security Posture Management (CSPM) Solutions

Discover essential criteria for evaluating Cloud Security Posture Management (CSPM) solutions, learn key comparison metrics, and gain practical insights for selecting the right security tooling for your environment.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Beyond the AWS Security Maturity Roadmap - Advanced Cloud Security Controls and Capabilities

Explore advanced AWS security capabilities beyond the standard maturity roadmap, focusing on scaling challenges, build-vs-buy decisions, and cutting-edge cloud security practices.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Unmasking the Subnet Lookalike IP Ranges in Cloud Environments - Security Risks and Detection

Discover how lookalike private IP ranges in cloud environments pose security risks, and learn proactive detection methods using CloudHunting framework and Sigma rules for AWS infrastructure protection.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Helping Developers Navigate Cloud Security with TrustOnCloud - A Streamlined Approach

Discover effective strategies for managing cloud security threats and making complex service configurations digestible for developers using TrustOnCloud's approach to threat modeling.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Pivoting Through AWS Organizations: Security Implications and Attack Pathways

Discover advanced techniques for exploiting AWS Organizations' security boundaries, from single account breaches to multi-account takeovers, with practical pentesting strategies and tools.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Passing the Security Burden - How to See the Unforeseen in Cloud Services

Discover how cloud services can introduce hidden security risks through service dependencies, using AWS Elastic Disaster Recovery as a case study to identify and mitigate potential vulnerabilities.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

fwd:cloudsec

gVisor: Architecture and Security Boundaries for Container Isolation

Explore gVisor's architecture, security boundaries, and threat modeling for container workload protection, including real vulnerability case studies and exploitation analysis.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

fwd:cloudsec

The Good, the Bad, and the Vulnerable: A Comprehensive Overview of Cloud Security Vulnerabilities

Explore how vulnerabilities impact cloud environments differently from on-premises systems, analyzing key security issues from 2022 and their varying significance in cloud architectures.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Processing Security Event Logs with AWS Serverless Stack - Billions Served

Master AWS serverless stack techniques for processing billions of security event logs efficiently, including real-time enrichment, optimal storage solutions, and cost-effective scaling strategies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Evading Logging in AWS CloudTrail - Security Techniques and Vulnerabilities

Discover advanced techniques for bypassing AWS CloudTrail logging, including vulnerability exploitation, security monitoring evasion, and defensive strategies for cloud environments.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Understanding AWS IAM Roles and Instance Profiles - Security Implications and Best Practices

Dive into the intricate relationship between AWS IAM roles and instance profiles, exploring unexpected behaviors, security implications, and essential management practices for cloud infrastructure.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Engineering Chaos to Secure Cloud Foundations - Alert Fatigue and Security Coverage

Discover how to combat alert fatigue and optimize cloud security through chaos engineering principles, focusing on high-signal alerts and comprehensive security coverage.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Unmasking the Hidden APIs of Azure and Entra - Security Implications and Mitigation

Uncover hidden APIs within Azure and Entra, exploring their security implications, potential exploitation risks, and essential mitigation strategies for building more secure cloud environments.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Tales From the Sewer: Building a Data Security Platform for the Cloud

Dive into real-world cloud security challenges and solutions through practical experiences with S3, Lambda, IAM, and encryption from Open Raven's data security platform development journey.

• YouTube
• 16 minutes
• Self-Paced
• Free Video