Yossi Weizman
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 4 in the filters
on a stage with
who talks about the same things
- Ram Pliskin2 talks
- Ian Coldwater19 talks
- Rory McCune18 talks
- Brad Geesaman8 talks
- James Callaghan5 talks
- Aviv Sasson5 talks
| title | conference | date |
|---|---|---|
| The Dark Side of Cloud Computing: How Threat Actors Abuse Millions of Dollars of Cloud Compute | CODE BLUE 2023 | 2023-11-08 |
Threat actors compromise admin credentials via password spray, credential dumps or phishing, escalate with Elevate access to gain Azure RBAC owner rights, then… | ||
| Lateral Movements in Kubernetes | RSA Conference 2023 | 2023-04-24 |
Compromised pods can escalate to full cluster or cloud access by abusing Kubernetes service account tokens, node identities, or misconfigured controllers that… | ||
| From the Cluster to the Cloud: Lateral Movements in Kubernetes | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Shows concrete exploit paths and fixes: Kubernetes RBAC that lets a pod update its own Deployment can spawn privileged pods with nodeSelectors to seize node… | ||
| Know Your Enemy: Mapping Security Risks Using Threat Matrix for Kubernetes | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Microsoft publishes an updated Threat Matrix for Kubernetes that maps concrete TTPs (examples: node-managed identity token theft, CoreDNS configmap poisoning… | ||
| nothing matches | ||