Topic

Cloud IAM talks at BSides

323 talks tagged Cloud IAM from 70 chapters of BSides events worldwide. Identity and access management in cloud platforms (AWS/Azure/GCP)

APT Attack Techniques in Azure Cloud

BSides Canberra · 2023

Technical Cloud IAM Talk

Open →2024-01

How to 10X Your Company's Security (Without a Series D)

BSidesSF · 2020

Technical Cloud IAM DevSecOps Threat Modeling Blue Talk

Open →2020-03

Amazon Cognito (Mis)Configurations

BSides Ahmedabad · 2021

Technical Cloud IAM Intermediary Red Talk

Open →2022-03

Pwning Cloud Contexts: From GitHub Token to Compromising an Entire GCP Organization

BSides Ahmedabad · 2024

Technical Cloud IAM Supply Chain Security Vulnerability Research Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-04

Attacking and Defending Infrastructure with Terraform: How we got admin across cloud environments

Mike Ruth Francisco Oca

BSidesSF · 2022

Technical Cloud IAM Talk

Open →2022-07

The GCP Metadata API: Security Considerations, Vulnerabilities, and Remediations

Dylan Ayrey Allison Donovan

BSidesSF · 2020

Technical Cloud IAM Talk

Open →2020-03

BsidesLV 2025 - Ground Floor - Monday

BSides Las Vegas · 2025

Technical Cloud IAM OSINT Vulnerability Research Red Talk

Open →2025-08

AWS vs Azure Security

Paul Schwarzenberger

BSides London · 2019

Technical Cloud IAM Talk

Open →2019-06

BeyondCorp: Beyond "fortress" security

Neal Mueller Jeff Peck

BSidesSF · 2017

Technical Cloud IAM Talk

Open →2017-03

How to Lose a Container in 10 Minutes

BSidesSF · 2019

Technical Cloud IAM Container Security Case Studies and Incidents Analysis Talk

Open →2019-03

All Your Containers Are Belong to Us

BSidesSF · 2019

Research Cloud IAM Empirical Research Talk

Open →2019-03

Passwords, Policies, Securing, Cracking and More

BSides Las Vegas · 2023

Technical Active Directory Cloud IAM Kerberos Talk

Open →2023-08

GSuite Digital Forensics and Incident Response

BSides SATX · 2018

Technical Cloud IAM DFIR Intermediary Blue Case Studies and Incidents Analysis Talk

Open →2018-07

Fantastic AWS Attacks and Where to Find Them

Georgios Kapoglis

BSidesSF · 2020

Technical Cloud IAM Talk

Open →2020-03

Understanding, Abusing and Monitoring AWS AppStream 2.0

Rodrigo Montoro

BSides Las Vegas · 2022

Technical Cloud IAM Detection Engineering Talk

Open →2022-09

Karl Fosaaen - Attacking Azure Environments with PowerShell - BSides Portland 2018

BSides PDX · 2018

Technical Cloud IAM Red Demo Talk

Open →2019-02

Deep Dive into Clouded Waters: Penetration Testing and Security in DigitalOcean

BSides Prishtina · 2023

Technical Cloud IAM Vulnerability Research Talk

Open →2023-05

Hiding in the clouds: How attackers can use applications for sustained persistence and how to find it

Mark Morowczynski Michael Epping

Bsides CT · 2020

Technical Cloud IAM Blue Talk

Open →2020-11

Attacking & Defending Supply Chains: How we got Admin in your Cloud, Again

BSidesSF · 2024

Technical Cloud IAM Supply Chain Security Talk

Open →2024-07

How to Kill an AWS Access Key

Benjamin Hering

BSidesSF · 2020

Technical Cloud IAM Blue Talk

Open →2020-03

WebAuthn, Yubikeys, and You: What we wish we knew before rolling out WebAuthn for internal use

BSidesSF · 2023

Technical Cloud IAM Talk

Open →2023-05

BSides Noida : Day - 1

Fardeen Ahmad Sourav Kumar Kavisha Sheth Philippe Humeau

BSides Noida · 2021

Technical Cloud IAM Vulnerability Research Web AppSec Talk

Open →2021-08

Learning from AWS Customer Security Breaches

Bsides CT · 2020

Technical Cloud IAM DFIR Intermediary Case Studies and Incidents Analysis Talk

Open →2020-11

Hackers Don't Break In, They Log In

Dhivya Balasubramanian

BSides SLC · 2025

Technical Cloud IAM Talk

Open →2025-10

Access Control with Concierge: One Tool to Rule Them All

Karthik Rangarajan

BSidesSF · 2017

Technical Active Directory Cloud IAM Talk

Open →2017-03

Threat Hunting AWS CloudTrail Logs with Microsoft Sentinel: Real-Time Attack Demo

BSides Sydney · 2025

Technical Cloud IAM Detection Engineering Threat Intel Intermediary Demo

Open →2025-02

BSidesSF 2023 - Advanced Attack Vectors in Azure Environments (Zur Ulianitzky, Bill Ben Haim)

Zur Ulianitzky Bill Ben Haim

BSidesSF · 2023

Technical Active Directory Cloud IAM Advanced Red Technical Deep-dives Talk

Open →2023-05

BSidesSF 2018 - Managing Secrets in Your Cloud Environment (Evan Johnson • Maya Kaczorowski)

Evan Johnson Maya Kaczorowski

BSidesSF · 2018

Technical Cloud IAM Container Security Cryptography Talk

Open →2018-04

How Google turned me into my mother: the proxy paradox in security

BSides London · 2015

Policy Cloud IAM Privacy Keynote

Open →2015-07

So You Think You Can Secure Your Cloud: Red Team Engagements in GCP

Brad Richardson Madhav Bhatt

BSidesSF · 2022

Technical Cloud IAM Red Talk

Open →2022-07

Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit

BSidesSF · 2023

Technical Cloud IAM Cryptography Blue Talk

Open →2023-05

Getting Things Fixed: Security Wins and Fails

BSides SLC · 2025

War Stories Cloud IAM Vulnerability Research Keynote

Open →2025-06

Tales from the Breach

BSides Seattle · 2024

War Stories Cloud IAM Supply Chain Security Case Studies and Incidents Analysis Talk

Open →2024-05

Infrastructure as RCE: How to abuse Terraform to elevate access

BSides NYC · 2023

Technical Cloud IAM DevSecOps Vulnerability Research Red Talk

Open →2023-06

One Search To Rule Them All: Threat Modelling AI Search

BSidesSF · 2025

Technical AI Security Cloud IAM Threat Modeling Talk

Open →2025-06

Non-Human Identity Attack Surface: A Live Hacking Demo and Defense Strategies

BSides Toronto · 2024

Technical API Security Cloud IAM Supply Chain Security Intermediary Blue Red Demo

Open →2024-10

Analyzing volatile memory on a Google Kubernetes Engine node

Marcus Hallberg

BSides NYC · 2023

Technical Cloud IAM Container Security DFIR Demo Talk

Open →2023-06

The Current State of Microsoft Identity Security: Common Security Issues

BSides Charm · 2024

Technical Active Directory Cloud IAM Threat Intel Blue Case Studies and Incidents Analysis Talk

Open →2024-06

Mastering the Art of Attacking and Defending a Kubernetes Cluster

Sanjeev Mahajan

BSides Canberra · 2024

Technical Cloud IAM Container Security Blue Red Talk

Open →2024-10

Inside Cloud Attack Paths: End-to-End Adversary Simulation

Mauricio Velazco

BSides NYC · 2025

Technical Cloud IAM Threat Modeling Blue Red Talk

Open →2025-11

Rolling out the C2: Red Team Infrastructure in 2024

BSides Las Vegas · 2024

Technical Cloud IAM DevSecOps Intermediary Red Demo Talk

Open →2024-09

Layers of Cloud: Azure and the Mishandling of Secrets

BSides Toronto · 2022

Technical Cloud IAM Web AppSec Case Studies and Incidents Analysis Talk

Open →2022-10

CI/CD Security: A New Eldorado

Remi Escourrou Xavier Gerondeau Gauthier Sebaux

BSides Las Vegas · 2022

Technical Cloud IAM DevSecOps Supply Chain Security Red Talk

Open →2022-09

WhizBangLambdaFix: where AWS Misconfigurations meet Auto-Fix-It Antics

Lily Chau Lakshmanan Murthy

BSidesSF · 2024

Technical Cloud IAM

Open →2024-07

Scaling Amazon GuardDuty: A Comprehensive Detection Strategy

Avinash Reddy Thumma Amin

BSides Ahmedabad · 2025

Technical Cloud IAM Detection Engineering Threat Intel Talk

Open →2025-05

Hunting Supply Chain Threats Using Anomaly Detection

Craig Chamberlain

BSidesSF · 2023

Technical Cloud IAM Detection Engineering Supply Chain Security Case Studies and Incidents Analysis Methodology Talk

Open →2023-05

There's no place like 169.254.169.254 - (Ab)using cloud metadata URLs

BSides SATX · 2019

Technical Cloud IAM Red Talk

Open →2019-09

For Crying Out Cloud - Stu Hirst and Tash Norris

Stu Hirst Tash Norris

BSides Munich · 2019

Technical Cloud IAM DevSecOps Threat Modeling Blue Talk

Open →2019-03

Launch Control — Automating a Security Baseline in the Cloud at Scale

David Levitsky Olivia Hillman

BSidesSF · 2023

Technical Cloud IAM Demo Talk

Open →2023-05

The Bucket List: Experiences Operating S3 Honeypots

BSidesSF · 2018

Research Cloud IAM Threat Intel Blue Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2018-04

Army of Proxies! How Netflix scales identity based zero trust architecture

Grant Callaghan

BSidesSF · 2024

Technical Cloud IAM Talk

Open →2024-07

Andrew Krug - Hacking Serverless Runtimes

BSides PDX · 2018

Technical Cloud IAM Vulnerability Research Red Talk

Open →2018-04

One Compromise to Rule Them All

Bryce Kunz Scott

BSides Las Vegas · 2016

Technical Cloud IAM Container Security Advanced Red Demo Talk

Open →2016-08

Go With The (Work)flow

Ryan Robinson Nicole Fishbein

BSidesSF · 2022

Technical Cloud IAM Intermediary Red Case Studies and Incidents Analysis Talk

Open →2022-07

Minimizing AWS S3 bucket attack vectors at scale

BSides Dallas/Fort Worth · 2022

Technical Cloud IAM DevSecOps Blue Talk

Open →2022-11

Using machine learning to detect sensitive documents on SharePoint

BSidesSF · 2023

Technical Cloud IAM Machine Learning Threat Intel Intermediary Technical Deep-dives Talk

Open →2023-05

An Overview in Cloud Penetration Testing

BSides Prishtina · 2022

Technical Cloud IAM Vulnerability Research Red Talk

Open →2022-05

XXE and the Cloud: the Sky IS Falling

Clint Kehr Mark Schmidt

BSides NoVa · 2021

Technical Cloud IAM Web AppSec Red Demo Talk

Open →2021-06

Exploiting Firebase Apps with Baserunner

BSides Joburg · 2025

Technical Cloud IAM Red Demo Talk

Open →2025-08

Security Lessons Learnt From The Cloud Frontline - Ben Fletcher

BSides Belfast · 2024

Technical Cloud IAM Detection Engineering Threat Intel Case Studies and Incidents Analysis Talk

Open →2024-03

Ohhhh365 - How To (Quite) Reliably Hack Into Microsoft 365, And What To Do Afterwards

BSides Cheltenham · 2024

Technical Cloud IAM Web AppSec Red Talk

Open →2024-07

Breaking Entra: Real-World Cloud Identity Attacks You Can Recreate

Tomer Nahum Jonathan Elkabas

BSides Frankfurt · 2025

Technical Active Directory Cloud IAM Intermediary Blue Red Technical Deep-dives Demo+1

Open →2025-12

Secure Key Management in the Cloud

BSides DC · 2017

Technical Cloud IAM Cryptography Talk

Open →2017-10

Purple is the New Black: Modern Approaches to Application Security

BSidesSF · 2020

Technical Cloud IAM DevSecOps Web AppSec Intermediary Purple Talk

Open →2020-03

BSidesSF 2024 - Temporary Access to the Cloud: A Case Study (Tomas Rabczak)

BSidesSF · 2024

Technical Cloud IAM Case Studies and Incidents Analysis Talk

Open →2024-07

From Packets to Intel: Building your own Network Threat Feed

BSides Joburg · 2025

Technical Cloud IAM Network Security Threat Intel Blue Talk

Open →2025-08

Centralizing Egress Access Controls Across a Hybrid Environment

BSidesSF · 2025

Technical Cloud IAM Network Security Blue Talk

Open →2025-10

Abusing Azure Arc: From Service Principal Exposed To Reverse Shell

Christian Bortone

BSides Leeds · 2024

Technical Active Directory Cloud IAM Advanced Red Technical Deep-dives Talk

Open →2024-07

Effective building blocks for securing multi-tenant Kubernetes clusters

Shrikant Pandhare Sagiv Sheelo

BSidesSF · 2024

Technical Cloud IAM Container Security DevSecOps Case Studies and Incidents Analysis Talk

Open →2024-07

BSidesSF 2019 - Building Identity for an Open Perimeter (Tejas Dharamshi)

Tejas Dharamshi

BSidesSF · 2019

Technical Cloud IAM Talk

Open →2019-03

Cloud-Squatting: The Never-Ending Misery Of Deleted And Forgotten Cloud Assets

Abdullah Al-Sultani

Technical Cloud IAM Talk

Open →2024-03

Man In The Cloud Attack

BSides SLC · 2017

Technical Cloud IAM Red Talk

Open →2017-06

Mixtape to Master Key Scenarios: How to block the Dark Army from mayhem using API-driven access control

BSidesSF · 2017

Technical Cloud IAM Talk

Open →2017-03

Identity Security Pitfalls: Common Issues and Misconfigurations in Entra ID

BSides Joburg · 2025

Technical Active Directory Cloud IAM Talk

Open →2025-08

Cedar, An Open Source Project To Help You Decouple Your Authorisation Logic - Ricardo Sueiras

Ricardo Sueiras

Technical Cloud IAM Talk

Open →2024-10

Closing the Visibility Gap: Threat Hunting with Hawk in the Microsoft Cloud

Jonathan Butler Lorenzo Paul Navarro

BSides Charm · 2025

Technical Tooling Cloud IAM DFIR Detection Engineering Threat Hunting Intermediary Blue+2

Open →2025-05

Pwning Zee Cloud: Microsoft Edition

Alberto Rodriguez

BSides Augusta · 2021

Technical Active Directory Cloud IAM Blue Red Talk

Open →2021-10

Pwned Cloud Society

BSides SLC · 2017

Technical Cloud IAM Red Talk

Open →2017-06

The Silent Breach: Security Threats in Google Workspace

Rex Guo Khang Nguyen

BSidesSF · 2025

Technical Cloud IAM Talk

Open →2025-06

Manage Your Attack Surface on a Budget

Brittany D Little Dileep Gurazada Joshua Danielson Anchal Raheja

BSides Las Vegas · 2021

Technical Tooling Cloud IAM Vulnerability Research Panel

Open →2021-08

Google Workspace Forensics – Insights from Real-World Hunts & IR

Ariel Szarf Doron Karmi

BSides TLV · 2023

Technical Cloud IAM DFIR Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2023-07

Cloudy With a Chance of Purple Rain: Leveraging Stratus Red Team to Secure Your Clouds

Luciano Avendano

BSides PDX · 2022

Technical Cloud IAM Detection Engineering Threat Modeling Purple Demo Talk

Open →2022-10

Purple Teaming Cloud Identity Simulation Labs for Red and Blue teams

BSides Dallas/Fort Worth · 2022

Technical Cloud IAM Detection Engineering Threat Modeling Purple Technical Deep-dives Demo Talk

Open →2022-11

Sign Here: Abusing AWS Presigned URLs for fun and profit

BSides Joburg · 2025

Technical Cloud IAM Web AppSec Talk

Open →2025-08

How Attackers (or Red Teamers) Navigate Azure Using Key Vault Lateral Movement

Christiano Bianchet

Technical Cloud IAM Red Talk

Open →2025-08

GCP BigQuery as Security Detection Platform

Diana Kramer Norberto García Marín

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Talk

Open →2021-08

The Dark Side of Cloud-Based Database Engines

Ofir Balassiano Ofir Shaty

BSides TLV · 2023

Technical Cloud IAM Red Talk

Open →2023-07

A Serverless SIEM: Detecting All Baddies

Chen Cao Daniel Stinson-Diess

BSides Las Vegas · 2021

Technical Cloud IAM Detection Engineering Blue Talk

Open →2021-08

Windows 11 At Your Service

Michael Bargury

BSidesSF · 2023

Technical Cloud IAM Malware Analysis Windows Security Intermediary Red Technical Deep-dives Talk

Open →2023-05

JIT Happens: How Instacart Uses AI to Keep Doors Open and Risks Closed

Dominic Zanardi Matthew Sullivan

BSides Las Vegas

Technical AI Security Cloud IAM Blue Demo

Open →2024-09

Pipeline Pandemonium: How to Hijack the Cloud and Make it Rain Insecurity

BSides Las Vegas · 2024

Technical Cloud IAM DevSecOps Supply Chain Security Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-09

How to Secure Cloud Machine Identities

Komal Dhull Nathan Brahms

BSidesSF · 2024

Technical Cloud IAM Talk

Open →2024-07

Baby Steps to the Future – Evolving into the Next-Gen SOC

BSides Charm · 2023

Technical Cloud IAM Detection Engineering Blue Talk

Open →2023-05

AiIAM: Transforming the Democratized AWS IAM Architecture with LLMs

Anthony Scheller Jorge L Gomez

BSidesSF · 2024

Technical Cloud IAM Talk

Open →2024-07

Y'all Tryna enumerate Azure AD and RBAC or Nah?

BSides Seattle · 2020

Technical Cloud IAM Red Demo Talk

Open →2020-11

Performing a 0-click Token Heist in Microsoft Teams Meetings

BSides Dublin · 2025

Technical Cloud IAM Web AppSec Advanced Red Technical Deep-dives Talk

Open →2025-10

Metabadger: Automating IMDS Protection at Scale in AWS

BSidesSF · 2022

Technical Cloud IAM Talk

Open →2022-07

Sure, Let Business Users Build Their Own. What Could Go Wrong?

Michael Bargury

BSidesSF · 2023

Technical Cloud IAM DevSecOps Threat Modeling Intermediary Case Studies and Incidents Analysis Talk

Open →2023-05

Analyzing Open Buckets: a Beginner’s Journey Through Misplaced Secrets by Michal Kamensky

Michal Kamensky

BSides TLV · 2022

Technical Cloud IAM OSINT Intro Talk

Open →2022-07

0.0.0.0 Day: Exploiting Localhost APIs From The Browser

Britt Frenkel Avi Lummenski

BSides Seattle · 2025

Technical Cloud IAM Vulnerability Research Web AppSec Advanced Red Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2025-06

View all 323 talks tagged Cloud IAM →