fwd:cloudsec Courses

Azure Arc - From a Heartbeat to Heart Attack

Discover Azure Arc security vulnerabilities that enable lateral movement from on-premise to cloud, including misconfigurations and privilege escalation techniques.

• YouTube
• 24 minutes
• On-Demand
• Free Video

STRIFEBOT - Attacking and Defending Snowflake Data-lakes

Explore offensive and defensive tactics for Snowflake data platforms, including TTPs, security controls, detection strategies, and a new open-source simulation tool.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Continuous Integration - Continuous Deception - Trying My Luck as a Malicious Maintainer

Explore how malicious maintainers can stealthily inject code into GitHub releases through CI/CD pipeline manipulation without touching application code directly.

• YouTube
• 27 minutes
• On-Demand
• Free Video

The File That Contained the Keys Has Been Removed - An Analysis of Secret Leaks in Cloud Buckets and Responsible Disclosure Outcomes

Explore a comprehensive analysis of secret leaks in misconfigured cloud storage buckets, covering 215 exposed credentials and responsible disclosure outcomes across major platforms.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Ransomware Protection with Immutable AWS Backup - It's Complicated

Discover AWS Backup complexities for ransomware protection, including vault locks, KMS keys, LAG vaults, and deployment challenges with open-source Terraform solutions.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Confidence Predicts Accuracy and Other Lies About Cloud Security

Explore how behavioral economics reveals why cloud security metrics mislead teams, and learn frameworks to move beyond intuitive thinking toward analytical approaches that reduce real risk.

• YouTube
• 43 minutes
• On-Demand
• Free Video

And I Would've Gotten Away With It Too If It Wasn't For You Meddling Researchers - Rapid Response Research in Cloud Security

Dive into rapid response research methods for cloud security incidents, exploring real-world supply chain attack investigation techniques and community collaboration strategies.

• YouTube
• 26 minutes
• On-Demand
• Free Video

EU Compliance Cloud Framework Smackdown

Discover how to build interlocking compliance hierarchies for cloud environments, covering NIS2, DORA, GDPR frameworks and practical implementation strategies for European organizations.

• YouTube
• 25 minutes
• On-Demand
• Free Video

From One to Hundreds - Reflections on a Decade of Building the Trenches

Discover insights from a decade-long journey scaling AWS infrastructure from one account to hundreds, exploring security, management challenges, and business value delivery.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Permission Impossible - Hidden Dangers of Azure RBAC and API Vulnerabilities

Uncover critical Azure RBAC vulnerabilities and API flaws that enable attackers to breach cloud infrastructure and access on-premise networks via corporate VPN connections.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Sweet Deception - Mastering AWS Honey Tokens to Detect and Outsmart Attackers

Master AWS honey tokens to detect attackers using deliberately exposed credentials, covering advanced detection strategies and API internals to outsmart sophisticated threats.

• YouTube
• 23 minutes
• On-Demand
• Free Video

A Candid Perspective on the Cloud Threat Landscape - What's Real, What's Not, and What Should Change

Uncover the reality of cloud threats through rigorous analysis of H1 2025 data, separating fact from fiction while learning actionable improvements for threat intelligence.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Cloud Abuse at Scale - How Cybercriminals Exploit Free Tiers for Profit

Uncover how cybercriminals systematically exploit cloud free tiers for profit, from automated account generation to underground marketplace resale, with real-world TTPs and defense strategies.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Connecting the Cloud-Dots - Constructing a Knowledge Layer from Autonomous Attack Simulation

Discover how AI agents autonomously simulate cloud attacks to build empirical knowledge layers, mapping telemetry to MITRE tactics for enhanced detection engineering across AWS, Azure, and GCP.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Dealing with Storage Data Logs in the Cloud - A Hidden Challenge

Uncover the complexities of cloud storage logging across AWS, Azure, and GCP, learning to build scalable threat detection systems that cut through noise and surface critical security signals.

• YouTube
• 25 minutes
• On-Demand
• Free Video