Securing Native Cloud Application Perimeter
summary
Walks through concrete Zoom failures (no end-to-end encryption, telemetry to Facebook, exposed cloud recordings) and shows rapid account harvests — half a million accounts in a week — plus classroom hijacks. Explains Azure fixes: avoid public blob containers and how simple listing queries expose files — Azure Blob public container listing — use time-limited SAS correctly, store keys and API secrets in Azure Key Vault, enforce HTTPS/TLS1.2, require client certificates for sensitive APIs, and rotate compromised keys.
AI-written summary · about
chapters (9)
- 0:00Introduction to cloud security
- 2:00Zoom security flaws overview
- 10:51Checking compromised accounts
- 12:37Cloud storage security basics
- 22:34Securing Azure Blob Storage
- 30:29Managing secrets and encryption keys
- 40:23HTTPS and SSL best practices
- 45:47Advanced security measures
- 46:31Conclusion and Q&A
related talks
41mUncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities
48mLateral Movement in the Age of Hybrid Cloud
52mUncovering Azure's Silent Threats: A Journey Into Cloud Vulnerabilities
43mDefending the Cloud: Securing Your Microsoft Data Workloads
55mAzure Attacks Unpacked: Real-World Threats & Lessons
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
45mKeeping Your AI/ML Data Secure
20mStop Doing Stupid $%^--How Not to Secure Your Environment