Navigating the Cloud Attack Landscape: 2023 Trends, Techniques, and Tactics
In an era where the cloud represents both innovation and risk, understanding the ever-evolving threat landscape has never been more vital. This expert session, led by Jose Hernandez from the esteemed Lacework Labs team, offers a deep dive into 2023's most pressing cloud security attack trends and techniques that aim to empower your organization with actionable insights, tangible metrics, and robust strategies to fend off sophisticated threats in the cloud. Kubernetes Attacks and Abuses: Explore the rise in Kubernetes-related vulnerabilities and the alarming surge in administrative plane abuses and attacks. Zenbleed Impact: Understand the profound impact of Zenbleed vulnerability on cloud providers and discover Lacework's proactive approach to mitigating its risks. Cloud Supply Chain Attacks: Delve into the intricacies of the JumpCloud APT case, extracting lessons on cloud supply chain attacks and their far-reaching implications. Deciphering CloudWizard APT: Analyze the evolution of the CloudWizard threat, spotlighting its innovative use of mainstream platforms like OneDrive, Dropbox, and Google Drive as command and control channels. Whether you're a seasoned security professional or just starting your journey, this session is tailored to provide valuable knowledge in safeguarding against a new age of threats. Join us as we explore the rapidly changing world of cloud security and provide valuable insights, tools, and strategies to safeguard your organization against an increasingly sophisticated array of threats.