fwd:cloudsec Courses

This Wasn't in the Job Description - Building a Production-Ready AWS Environment from Scratch

Discover how security consultants built a production-ready AWS environment from scratch on a tight budget, covering authentication, organization structure, deployment, and monitoring strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Logs Don't Mean a Thing - Unraveling IaC-Managed Identity Ownership

Discover how to identify identity ownership in Infrastructure-as-Code environments when traditional audit logs fall short, using advanced analysis techniques.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

The Good, the Bad, and the Ugly - Hacking 3 CSPs with 1 Vulnerability

Discover how a single container escape vulnerability in NVIDIA Container Toolkit compromised three major cloud providers, revealing critical security flaws in GPU infrastructure.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

The False Sense of Security - Defense Becoming a Vulnerability

Uncover how Microsoft Entra ID's Privileged Identity Management creates false security and learn to transform procedural formalities into meaningful protection against threats.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

The Duplicitous Nature of AWS Identity and Access Management (IAM)

Uncover AWS IAM's hidden complexities and duplicitous permissions that create security blind spots, exploring how similar actions can bypass monitoring and create vulnerabilities.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Double Agents - Exposing Hidden Threats in AI Agent Platforms

Uncover methodologies attackers use to compromise AI agents, bypass security controls, and access sensitive data, plus learn actionable mitigation strategies for protection.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

You Are Not Netflix - How to Learn from Conference Talks

Uncover the hidden truths behind conference talks and engineering blogs by learning to read between the lines and extract meaningful insights despite omissions and half-truths.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Taming LLMs to Detect Anomalies in Cloud Audit Logs

Discover how to train LLMs on cloud audit logs to create powerful anomaly detection engines that reduce false positives and enhance security insights.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Challenges Around AI-as-a-Service Logging

Explore logging and observability challenges in AI-as-a-Service platforms, learning detection strategies and practical solutions for LLM-based PaaS offerings.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

When Your Partner Betrays You - Trusted Relationship Compromise in the Cloud

Uncover how nation-state actors exploit trusted cloud partnerships to breach multiple victims through Microsoft CSPs and SaaS providers, plus learn detection and mitigation strategies.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Introducing GRC Engineering - A New Era of AWS Compliance

Discover how GRC Engineering transforms AWS compliance from manual processes into automated, strategic assets using native tools and infrastructure as code practices.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Rebuilding ROADRecon for the Modern Entra Environment

Discover how to modernize ROADRecon for Entra environments, transitioning from deprecated Azure AD Graph to Microsoft Graph API while exploring OAuth security implications.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Trust Issues - What Do All These JSON Files Actually Mean?

Discover how to decode AWS IAM policies and understand real-world permissions across your cloud environment without manually parsing complex JSON configurations.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Exploiting nOAuth - Critical OpenID Connect Implementation Flaws in SaaS Applications

Explore nOAuth attacks and OpenID Connect flaws that enable SaaS application takeover, plus learn mitigation strategies from real-world exploitation examples.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

ECS-cape - Hijacking IAM Privileges in Amazon ECS

Discover how to exploit an undocumented Amazon ECS protocol vulnerability that enables low-privileged roles to hijack higher-privileged container IAM permissions on shared EC2 instances.

• YouTube
• 37 minutes
• Self-Paced
• Free Video