Breaking Into The Cloud

As organizations continue to migrate workloads and applications to the cloud, potential gaps in their cloud security may emerge. Many organizations fail to properly configure and secure their cloud infrastructure, leaving it vulnerable to attacks. Cloud technologies also contain attack surface that on-premises infrastructure does not, exposing organizations to additional risk that may not be fully understood. Aaron Martin and Savannah Lazzara will discuss how security testers can thoroughly enumerate an organization's cloud infrastructure, obtain access into those cloud assets, lateral movement, privilege escalation, and other useful TTPs for attacking cloud resources.