Adversaries Also Lift & Shift: Cloud Threats Through the Eyes of an Adversary

No ratings

Presented at BSidesLV 2024 by

Sherman

Adi

In this talk, we delve into the evolving landscape of cybersecurity threats in cloud environments, showcasing how adversaries are shifting tactics from traditional breaches to sophisticated cloud-specific attacks. No longer merely "breaking in," attackers are now "logging in," leveraging the cloud's unique vulnerabilities and features to their advantage. We explore the sophisticated tools and strategies these adversaries employ, from exploiting misconfigurations and weak access management to manipulating cloud-native functionalities. This presentation highlights the critical shift in attacker techniques and the imperative for defenders to adopt cloud-native security strategies. Through real-world case studies and analysis of successful breaches, attendees will gain invaluable insights into the attackers' mindset and the evolving attack vectors effective in cloud scenarios. This talk aims to equip cybersecurity professionals with the knowledge to anticipate, identify, and defend against these advanced tactics, promoting a proactive and resilient defense posture against the ever-changing threat landscape in cloud environments.