Stories from the cutting edge: Cloud security in 2023
summary
Claims and hard numbers: 600% rise in supply‑chain attacks, 55% of organizations have at least one publicly exposed database, an S3 bucket with a common name is accessed within seven hours (13 hours if leaked on GitHub), Log4Shell detection rolled out in eight hours and OpenSSL detection before CVE. Findings and fixes: an OMIGOD library reached 60% of Azure customers, 82% of companies grant third‑party highly privileged roles. What works: inventorying APIs and data, container/image scanning and patching, automation/guardrails, a security‑champions program, and the Open Cloud Vulnerability DB for cloud‑specific flaws.
AI-written summary · about
chapters (8)
- 0:00Intro
- 1:27The team behind the top cloud threats
- 4:02Threat research process
- 8:40Practical steps to mitigate API security risks
- 17:06Data exposure
- 24:42Threat #4 - Supply chain risks
- 28:01Supply chain risk in the cloud
- 34:52Identify a software supply chain risk
related talks
18mSecuring cloud innovation: Lessons learned
50mAvoiding cloud security anti-patterns the right way
50mInsights into New Supply Chain and Cloud-Identity Attacks
24mCracking the Code of Cloud Security
38mAdventures in Cloud Security: What DevOps Can Learn from a Security Engineer
17mThe Future of Cloud-Native Security
37mShift left, shield right: Code-to-cloud strategy for securing apps
44mCloud Security Essentials