fwd:cloudsec Courses

Challenges Implementing Egress Controls in a Large AWS Environment

Discover implementation challenges of AWS egress controls at scale, including service limitations, evasion techniques, and unexpected issues when processing terabytes of traffic daily.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Shared-GPU Security Learnings from Fly.io

Discover security challenges and solutions for shared GPU access in cloud environments, covering NVIDIA hardware architecture, PCIe threats, and practical mitigations from Fly.io's experience.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

What Would You Ask a Crystal Ball for AWS IAM? - Demystifying Identity and Access Management Policies

Discover open-source tools to demystify AWS IAM policies, model access control, and answer critical security questions about resource permissions and policy changes.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

I SPy - Rethinking Entra ID Research for New Paths to Global Admin

Uncover a critical Entra ID vulnerability allowing Application Administrator to Global Admin escalation via service principal backdoors and learn mitigation strategies.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

What Do You Mean, 'Resource Not Found?' - Demystifying GCP Error Codes for IR and Detections

Uncover how GCP error codes like "resource not found" can enhance incident response, improve detection rules, and reveal potential reconnaissance attempts in cloud security.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

This Wasn't in the Job Description - Building a Production-Ready AWS Environment from Scratch

Discover how security consultants built a production-ready AWS environment from scratch on a tight budget, covering authentication, organization structure, deployment, and monitoring strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Logs Don't Mean a Thing - Unraveling IaC-Managed Identity Ownership

Discover how to identify identity ownership in Infrastructure-as-Code environments when traditional audit logs fall short, using advanced analysis techniques.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

The Good, the Bad, and the Ugly - Hacking 3 CSPs with 1 Vulnerability

Discover how a single container escape vulnerability in NVIDIA Container Toolkit compromised three major cloud providers, revealing critical security flaws in GPU infrastructure.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

The False Sense of Security - Defense Becoming a Vulnerability

Uncover how Microsoft Entra ID's Privileged Identity Management creates false security and learn to transform procedural formalities into meaningful protection against threats.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

The Duplicitous Nature of AWS Identity and Access Management (IAM)

Uncover AWS IAM's hidden complexities and duplicitous permissions that create security blind spots, exploring how similar actions can bypass monitoring and create vulnerabilities.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Double Agents - Exposing Hidden Threats in AI Agent Platforms

Uncover methodologies attackers use to compromise AI agents, bypass security controls, and access sensitive data, plus learn actionable mitigation strategies for protection.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

You Are Not Netflix - How to Learn from Conference Talks

Uncover the hidden truths behind conference talks and engineering blogs by learning to read between the lines and extract meaningful insights despite omissions and half-truths.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Taming LLMs to Detect Anomalies in Cloud Audit Logs

Discover how to train LLMs on cloud audit logs to create powerful anomaly detection engines that reduce false positives and enhance security insights.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Challenges Around AI-as-a-Service Logging

Explore logging and observability challenges in AI-as-a-Service platforms, learning detection strategies and practical solutions for LLM-based PaaS offerings.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

When Your Partner Betrays You - Trusted Relationship Compromise in the Cloud

Uncover how nation-state actors exploit trusted cloud partnerships to breach multiple victims through Microsoft CSPs and SaaS providers, plus learn detection and mitigation strategies.

• YouTube
• 21 minutes
• Self-Paced
• Free Video