When the External Threats and Internal Risks Meet: A Story of Cloud Breach

No ratings

Presented at SecTor 2023 by

Jay Chen

Noah McDonald

Vulnerabilities and misconfigurations are universal. When they are present in the right location at the right time, a breach can happen. This talk examines a real cloud breach incident and details similar issues observed in thousands of cloud environments. We witnessed unconventional initial access, such as SIM swapping, that led to data breaches and large-scale, fully automated cryptojacking attacks that cost the victim tens of thousands daily. The threat actors' TTPs are not sophisticated, but the weaknesses they exploit are ubiquitous in almost every organization (e.g., excessive permissions, hard-coded credentials, outdated services). Join us for a street-level view of the cloud attack surface.