Cloud Security on Be The Adversary

DeepSec and BSidesVienna: Attackers Aren't Breaking In, They're Logging In

Sun, 01 Dec 2024 00:00:00 +0000

First Time in Vienna: DeepSec, BSidesVienna, Schnitzel, and Cloud Security Realities#

Just got back from the stunning city of Vienna, where I had the pleasure of speaking at not one, but two fantastic conferences: DeepSec and BSidesVienna. These events gather some of the best minds in security, all set against a backdrop of Viennese charm. And let me tell you, the setting didn’t disappoint. Between wandering the historic streets, stuffing myself with schnitzel, and discussing the finer points of cloud security, it was a weekend I won’t forget anytime soon.

CodeBlue 2024 Adventure

Wed, 20 Nov 2024 00:00:00 +0000

The CodeBlue Adventure: Japan, Snowflakes, and Cloudy Threats#

Last week, I checked off a major milestone in my career: speaking at the CodeBlue Conference in Tokyo, Japan. For years, CodeBlue has been on my bucket list-that shining, slightly intimidating event where cybersecurity pros gather to share their wisdom. And let me tell you, it was as amazing as I’d imagined, with the added bonus of being my very first trip to Japan!

BSidesLV24: Adversaries Also Lift & Shift: Cloud Threats Through the Eyes of an Adversary

Sat, 05 Oct 2024 00:00:00 +0000

In August, Adi Belnikov and I had the opportunity to present at BSidesLV on a topic that’s become increasingly critical: the evolving nature of cloud threats from the adversary’s perspective. Our talk, titled “Adversaries Also Lift & Shift: Cloud Threats Through the Eyes of an Adversary,” focused on the new landscape of cloud security and the way attackers are adapting faster than many defenders.

Instead of “breaking in,” adversaries are now often “logging in.” They’re leveraging cloud-native features, misconfigurations, and legitimate services to execute sophisticated attacks that are much harder to detect. Our goal with this presentation was to shine a light on how attackers view cloud environments and the innovative methods they employ to exploit these spaces.

ADFSpray - when you need to make your own tools

Thu, 23 Apr 2020 13:09:57 +0300

TL;DR - new tool! ADFSpray

I’ve needed to perform a password spraying attack against a Microsoft resource. I’ve looked online and found various tools that looked promising (like this, this and this, among others.

I was happy to find many options across multiple languages, and I was confident they would save me some time, but to my surprise, none of them worked as I needed (because of the environment I was testing, the tools themselves are working correctly).