fwd:cloudsec Courses

Pods Without Borders - Lateral Movement in Azure Kubernetes Service

Uncover lateral movement techniques in Azure Kubernetes Service, exploring network policy weaknesses, real-world misconfigurations, and practical hardening steps.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

The Cloud is a Spider Web - But with Broken Threads

Explore cloud security vulnerabilities in CSP architectures, focusing on Universal DNS Zones and credential abuse scenarios that enable resource hijacking and supply chain attacks.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Source IP Spoofing in Cloud Logs - A Hands-On Look Across AWS, Azure, and GCP

Uncover source IP spoofing techniques across AWS, Azure, and GCP through hands-on demonstrations, exploring VPC endpoints, cross-tenant identity abuse, and detection methods.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Console Hero to IAM Zero - Learn from Temporal's Just-In-Time Journey

Discover how to eliminate static credentials and implement just-in-time access across your organization, covering technical deployment and crucial organizational buy-in strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Hello? Whose Service Account Keys Are These? - GCP Security and Long-Lived Credentials

Discover GCP service account key risks, real-world breach examples, and secure credential handling practices to protect your cloud infrastructure from malicious attacks.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

SyncJacked - Hijacking Identities Through Entra Connect Synchronization

Uncover SyncJacking and SoftMatching Abuse techniques that exploit Microsoft Entra Connect vulnerabilities to hijack cloud identities in hybrid environments with live demos.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Lurking in the Documentation Shadows - Why We Built the AWS Security Changes Project

Discover how undocumented AWS changes expose security risks and learn to build proactive threat intelligence using the open-source awssecuritychanges.com project.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Security by Design - Lessons from Oracle Cloud Infrastructure

Explore Oracle Cloud Infrastructure's unique security approach, contrasting its tenancy model and policy syntax with AWS, Azure, and GCP for multi-cloud strategies.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Mistrusted Advisor - When AWS Tooling Leaves Public S3 Buckets Undetected

Uncover critical flaws in AWS security tooling that fail to detect public S3 buckets, revealing undocumented evasion techniques and bypassing detection methods.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Challenges Implementing Egress Controls in a Large AWS Environment

Discover implementation challenges of AWS egress controls at scale, including service limitations, evasion techniques, and unexpected issues when processing terabytes of traffic daily.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Shared-GPU Security Learnings from Fly.io

Discover security challenges and solutions for shared GPU access in cloud environments, covering NVIDIA hardware architecture, PCIe threats, and practical mitigations from Fly.io's experience.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

What Would You Ask a Crystal Ball for AWS IAM? - Demystifying Identity and Access Management Policies

Discover open-source tools to demystify AWS IAM policies, model access control, and answer critical security questions about resource permissions and policy changes.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

I SPy - Rethinking Entra ID Research for New Paths to Global Admin

Uncover a critical Entra ID vulnerability allowing Application Administrator to Global Admin escalation via service principal backdoors and learn mitigation strategies.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

What Do You Mean, 'Resource Not Found?' - Demystifying GCP Error Codes for IR and Detections

Uncover how GCP error codes like "resource not found" can enhance incident response, improve detection rules, and reveal potential reconnaissance attempts in cloud security.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

This Wasn't in the Job Description - Building a Production-Ready AWS Environment from Scratch

Discover how security consultants built a production-ready AWS environment from scratch on a tight budget, covering authentication, organization structure, deployment, and monitoring strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video