fwd:cloudsec Courses

Pods Without Borders - Lateral Movement in Azure Kubernetes Service

Uncover lateral movement techniques in Azure Kubernetes Service, exploring network policy weaknesses, real-world misconfigurations, and practical hardening steps.

• YouTube
• 23 minutes
• On-Demand
• Free Video

The Cloud is a Spider Web - But with Broken Threads

Explore cloud security vulnerabilities in CSP architectures, focusing on Universal DNS Zones and credential abuse scenarios that enable resource hijacking and supply chain attacks.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Source IP Spoofing in Cloud Logs - A Hands-On Look Across AWS, Azure, and GCP

Uncover source IP spoofing techniques across AWS, Azure, and GCP through hands-on demonstrations, exploring VPC endpoints, cross-tenant identity abuse, and detection methods.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Console Hero to IAM Zero - Learn from Temporal's Just-In-Time Journey

Discover how to eliminate static credentials and implement just-in-time access across your organization, covering technical deployment and crucial organizational buy-in strategies.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Hello? Whose Service Account Keys Are These? - GCP Security and Long-Lived Credentials

Discover GCP service account key risks, real-world breach examples, and secure credential handling practices to protect your cloud infrastructure from malicious attacks.

• YouTube
• 20 minutes
• On-Demand
• Free Video

SyncJacked - Hijacking Identities Through Entra Connect Synchronization

Uncover SyncJacking and SoftMatching Abuse techniques that exploit Microsoft Entra Connect vulnerabilities to hijack cloud identities in hybrid environments with live demos.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Lurking in the Documentation Shadows - Why We Built the AWS Security Changes Project

Discover how undocumented AWS changes expose security risks and learn to build proactive threat intelligence using the open-source awssecuritychanges.com project.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Security by Design - Lessons from Oracle Cloud Infrastructure

Explore Oracle Cloud Infrastructure's unique security approach, contrasting its tenancy model and policy syntax with AWS, Azure, and GCP for multi-cloud strategies.

• YouTube
• 18 minutes
• On-Demand
• Free Video

Mistrusted Advisor - When AWS Tooling Leaves Public S3 Buckets Undetected

Uncover critical flaws in AWS security tooling that fail to detect public S3 buckets, revealing undocumented evasion techniques and bypassing detection methods.

• YouTube
• 16 minutes
• On-Demand
• Free Video

Securing Organizations' ML and LLMOps Deployments - A Platform Architect's Journey Onboarding LLM and MLOps Tools

Explore security-focused architectures for ML/LLM deployments across multi-cloud environments, covering AWS/Azure controls, data access patterns, and compliance in regulated industries.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Keeping Your Cloud Environments Secure During a Merger or Acquisition

Discover strategies for securely integrating acquired companies' cloud environments while mitigating unexpected security risks and handling maturity differences.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Breaking AI Agents - Exploiting Managed Prompt Templates to Take Over Amazon Bedrock Agents

Uncover critical security vulnerabilities in AWS Bedrock Agents through prompt injection attacks that enable agent hijacking, unauthorized tool execution, and memory manipulation.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Bypassing AI Security Controls with Prompt Formatting

Discover how to exploit AWS Bedrock Guardrails using prompt formatting techniques to bypass sensitive information filters and learn mitigation strategies for AI security.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Read Between The Logs - A New Vulnerability in Gemini Cloud Assist Proves the Threat is Real

Discover a critical vulnerability in Google's Gemini Cloud Assist where attackers embed malicious prompts in logs to exploit AI tools and deceive defenders into phishing attacks.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Challenges Implementing Egress Controls in a Large AWS Environment

Discover implementation challenges of AWS egress controls at scale, including service limitations, evasion techniques, and unexpected issues when processing terabytes of traffic daily.

• YouTube
• 26 minutes
• On-Demand
• Free Video