Security Through Transparency: Lessons from an S3 Incident

No ratings

Presented at PurpleTeamSummit 2020 by

Aaron Stanley

About halfway through 2020, Twilio suffered a security incident due to an improperly configured S3 bucket. I blogged about it here: https://www.twilio.com/blog/incident-report-taskrouter-js-sdk-july-2020.In this presentation, I’ll take you behind the scenes to look at some of the key decision points and outcomes that could help SOCs and SIRTs better prepare for a publicly facing security incident and may guide vulnerability management and offensive security teams towards countermeasures and attack paths they hadn’t thought about before. Join me for an up close view of just what can happen in a fast-paced, always on, cloud-native environment.