Security Courses

fwd:cloudsec

Forging Multi-Cloud Open Source Swiss-Army Knife - Building Cloud Security Tools

Discover how to build and maintain robust open-source security tools for multi-cloud environments, covering authentication challenges, SDK management, compliance mapping, and effective reporting across AWS, Azure, and Google Cloud.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Vulnerabilities and Misconfigurations in GitHub Actions: Security Risks and Mitigations

Explore critical security vulnerabilities in GitHub Actions, from supply chain attacks to OIDC misconfigurations, and learn essential mitigation strategies for protecting CI/CD pipelines.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

fwd:cloudsec

AWS Naming Conventions and Their Security Implications in Cloud Environments

Explore how AWS naming conventions can be exploited for attacks and obfuscation, examining real scenarios and their impact on security detection capabilities and incident response.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

fwd:cloudsec

AWS Presigned URLs: The Good, The Bad, and The Ugly - Security Implications and Attack Prevention

Explore AWS presigned URLs' security implications, attack scenarios, and defensive strategies for protecting cloud resources from unauthorized access and data exfiltration.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Success Criteria for Cloud Security Posture Management (CSPM) Solutions

Discover essential criteria for evaluating Cloud Security Posture Management (CSPM) solutions, learn key comparison metrics, and gain practical insights for selecting the right security tooling for your environment.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Beyond the AWS Security Maturity Roadmap - Advanced Cloud Security Controls and Capabilities

Explore advanced AWS security capabilities beyond the standard maturity roadmap, focusing on scaling challenges, build-vs-buy decisions, and cutting-edge cloud security practices.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Unmasking the Subnet Lookalike IP Ranges in Cloud Environments - Security Risks and Detection

Discover how lookalike private IP ranges in cloud environments pose security risks, and learn proactive detection methods using CloudHunting framework and Sigma rules for AWS infrastructure protection.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Helping Developers Navigate Cloud Security with TrustOnCloud - A Streamlined Approach

Discover effective strategies for managing cloud security threats and making complex service configurations digestible for developers using TrustOnCloud's approach to threat modeling.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Pivoting Through AWS Organizations: Security Implications and Attack Pathways

Discover advanced techniques for exploiting AWS Organizations' security boundaries, from single account breaches to multi-account takeovers, with practical pentesting strategies and tools.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Passing the Security Burden - How to See the Unforeseen in Cloud Services

Discover how cloud services can introduce hidden security risks through service dependencies, using AWS Elastic Disaster Recovery as a case study to identify and mitigate potential vulnerabilities.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

fwd:cloudsec

gVisor: Architecture and Security Boundaries for Container Isolation

Explore gVisor's architecture, security boundaries, and threat modeling for container workload protection, including real vulnerability case studies and exploitation analysis.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

fwd:cloudsec

The Good, the Bad, and the Vulnerable: A Comprehensive Overview of Cloud Security Vulnerabilities

Explore how vulnerabilities impact cloud environments differently from on-premises systems, analyzing key security issues from 2022 and their varying significance in cloud architectures.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Processing Security Event Logs with AWS Serverless Stack - Billions Served

Master AWS serverless stack techniques for processing billions of security event logs efficiently, including real-time enrichment, optimal storage solutions, and cost-effective scaling strategies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Evading Logging in AWS CloudTrail - Security Techniques and Vulnerabilities

Discover advanced techniques for bypassing AWS CloudTrail logging, including vulnerability exploitation, security monitoring evasion, and defensive strategies for cloud environments.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Understanding AWS IAM Roles and Instance Profiles - Security Implications and Best Practices

Dive into the intricate relationship between AWS IAM roles and instance profiles, exploring unexpected behaviors, security implications, and essential management practices for cloud infrastructure.

• YouTube
• 24 minutes
• Self-Paced
• Free Video