Don't Go There! Horrible Devops Security Blunders
summary
Shows real incidents of secrets and infrastructure left exposed: tokens pushed to Git and embedded in source lead to full compromise within minutes, often found via a simple used a web scanner search. CI pipelines routinely leak credentials, developers commit infra code with secrets, and public S3 buckets expose production data. Demonstrates numbers and timelines for exploit, practical steps to remove leaked tokens fast, and one clear takeaway that cloud compliance or certificates do not equal secure software.
AI-written summary · about
related talks
38mAdventures in Cloud Security: What DevOps Can Learn from a Security Engineer
22mDevSecOps - The Story of 3 Security Breaches
39mSecurity in a DevOps World
40mDevOoops (Increase awareness around DevOps infra security)
46mApplication security from start to finish
01h 24mCode Red: Navigating the Minefield of Security Programming Blunders
33mGaining initial access by exploiting leaked credentials
39mPerils of the cloud