Magno Logan
where else to find them
no profile links on file
what they talk about
all 5 in the filters
where they keep going back
no series more than once — all 10 in the filters
on a stage with
- Nitesh Surana2×
- Andrew Martinonce
- David Fiseronce
who talks about the same things
- Nitesh Surana4 talks
- Andrew Martin50 talks
- Chris Ayers20 talks
- Rory McCune18 talks
- Jimmy Mesta7 talks
- Brad Geesaman8 talks
| title | conference | date |
|---|---|---|
| Uncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities | Black Hat USA 2023 | 2023-08-05 |
Investigates Azure Machine Learning and demonstrates concrete failures: storage account keys logged in cleartext in startup and agent environment files, JWTs… | ||
| Abusing GitHub for fun and profit: Actions and Codespaces Security | NDC Oslo 2023 | 2023-05-22 |
Demonstrates concrete abuses: GitHub Codespaces gives two free instances and ~60 core hours per month with 30‑day retention and a 40‑minute idle timeout, and… | ||
| Kubernetes Security 101: Best Practices to Secure Your Cluster | Open Source Summit North America 2023: Open Source On-Ramp | 2023-05-10 |
Outlines Kubernetes control plane and node components, maps specific risks (etcd plain‑at‑rest, kubelet API exposure) and actionable defenses: image scanning… | ||
| GitHub Actions: Vulnerabilities, Attacks, And Counter-Measures | Global AppSec Dublin 2023 | 2023-02-15 |
Shows concrete exploitation: attackers upload actions that run XMrig and mine on Azure VMs, abuse Windows Linux and Mac runners, and automate forked pull… | ||
| GitHub Actions: Vulnerabilities, Attacks, and Counter-measures | NDC Security 2023 | 2023-01-16 |
Shows that GitHub Actions runners (Azure VMs) are abused at scale to mine cryptocurrency using an XMRig miner embedded in workflow steps and to persist via… | ||
| The State of Vulnerability in Cloud Native Security | Cloud Native Security Conference North America 2021 | 2021-10-12 |
Aggregates 40+ CNCF security audit PDFs into a searchable GitHub repo and parses 40+ audit PDFs into a GitHub repo to extract 1) audit findings and 2)… | ||
| Kubernetes Security: Attacking and Defending K8s Clusters | OWASP 20th Anniversary 2021 | 2021-09-24 |
Shows a concrete RCE against an outdated Drupal pod that leads to container escape, worker‑node takeover and cloud API key theft used to mine cryptocurrency… | ||
| Kubernetes Security: Attacking and Defending K8s Clusters | BSides Vancouver 2021 | 2021-06-07 |
A live exploit of a vulnerable Drupal site (Drupalgeddon2 (CVE-2018-7600)) yields a shell in a pod and attackers spin up crypto‑miners within 24 hours… | ||
| Kubernetes Security: Attacking and Defending K8s Clusters | sec4dev 2021 | 2021-02-22 |
Demonstrates exploiting a Drupal CVE-2018-7600 RCE to get a shell in a pod, using the pod’s service account token for internal recon and then launching a… | ||
| Capture the Flag Wrap Up & Summary | Cloud Native Security Day North America 2020 | 2020-11-17 |
Six hands-on CTF scenarios reproduce real failures: a privileged container mounts host disks and exposes a node secret; a host PID namespace lets /proc reveal… | ||
| nothing matches | ||