Cloud Infrastructure Attacks: Demystifying Real-World Threats #shorts

Thanks everyone for coming. I'm going to talk about the Mr. Fine and well, I'm going to try to demystify cloud infrastructure attacks. So, let's just start with trying to figure out what we're going to talk about and this is a classic on-premises attack. This is actually like from a old red team exercise we did like I don't know 10 years ago, something like that. And you know, what you have here is something typical like, you know, the attack like they compromise the DMZ and somehow jump into some kind of internal segment where they like compromise something that's joint in active directory domain and find some dependencies, jump to the internal active directory, eventually maybe they

hit the mainframes or whatever high-value targets the protector want to do. So, this is like a typical kind of attack, right? What I am going to try to answer is what does this kind of attack, where you have like a full-scale attack like this, look like when we are in the cloud? So, to start with, we have some bad news that there is no cloud. But, jokes aside, of course there is a cloud like we can I think it makes sense to still talk about it in terms of like we have a shared platform with APIs and the web UI and services that are standardized and so on, right? So, that's sort of what we're going to try

to talk about.