Securing cloud innovation: Lessons learned
summary
Cloud incidents and cloud-specific tradecraft increase—MITRE cloud techniques grow from 50 to 61 in three years—threats mix container, pipeline and identity attacks. Examples: LemonDuck spins up miners and disables monitoring in 15 seconds, CTX package compromise hits about 250,000 organizations, Rust and Go ransomware (ALPHV, AcidPour) target Linux, Black Mamba proof rewrites malware to evade ~95% of tools. SentinelOne describes an agent-less CNAPP that produces Verified Exploit Paths screenshots and an agent-based protector that blocks at machine speed and onboards in about five minutes.
AI-written summary · about
chapters (8)
- 0:00The evolving cloud threat
- 1:14Analyzing threat trends
- 3:41Common cloud attack vectors
- 7:32Cloud misconfiguration risks
- 9:41Real-world incident analysis
- 11:43Challenges in security ops
- 13:47SentinelOne security approach
- 15:15Verified exploit path demo
related talks
50mAvoiding cloud security anti-patterns the right way
50mThe Anatomy of Cloud Attacks
50mInsights into New Supply Chain and Cloud-Identity Attacks
43mClouds in the forecast: CrowdStrike cloud risk report
46mStories from the cutting edge: Cloud security in 2023
47mMissing Piece of Cloud Security
41mIdentifying and Mitigating Cloud and Container Threats
56mNavigating the Cloud Native Security Landscape