AI
📙 The Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud 🏗️
cloud securityidentity and access
Topic
Cloud Security
Securing AWS, Azure, GCP, and cloud-native stacks — covering CSPM, container and Kubernetes security, cloud IAM, and DSPM.
- AWS security
- Azure security
- GCP security
- cloud-native security
- CSPM
- CWPP
- CNAPP
- container security
- Kubernetes security
- serverless security
- cloud IAM
- multi-cloud security
- cloud misconfiguration
- cloud forensics
- cloud compliance
- cloud incident response
- workload protection
- DSPM
- CASB
67
Talks
7
Conferences
BSidesSF 2026
13 talks📙 Your Load Balancer is Your New Perimeter: Attacks & Defenses at Scale 🏗️
network and infrastructurecloud security
Sandboxes, Seccomp, and Syscalls: Chasing Isolation in Kubernetes
cloud securityapplication security
📙 Incident Readiness You and Your Leaders Will Actually Trust 🔥
defensive securitycloud security
📕 Pwning and Defending AI Agent Code Interpreters 🤖
offensive securitycloud securityai security
📙 Red Teaming from outside: Identifying and exploiting SaaS systems for access 🏗️
offensive securitycloud security
📗 Orchestrating Resilience: Composing a New Score for Netflix Service Reliability 🏗️
defensive securitycloud security
📙 Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026 🖥️
application securitycloud security
📙 So you think you can airgap? (No.) 🏗️
cloud security
📙 What a False Alarm Taught Us About Security as a 2-Person Startup 🔥
defensive securitycloud security
📙 RBAC Atlas: Mapping Real-World Kubernetes Permissions and Exposing Risky Projects 🏗️
cloud securityidentity and access
📗 Google Drive Hunter: Building the Tool Google Should’ve Built 🏗️
cloud securitydefensive security
📕 CloudShell Hide-n-Seek: enjoying the sweet persistent sounds of silence! 🔥
cloud securityoffensive securitydefensive security
KubeCon + CloudNativeCon Europe 2026
33 talksReal-World Supply-Chain Security - Alex Leong, Buoyant
application securitycloud security
Beyond Image Pull-Time: Ensuring Runtime Integrity With Image Layer Signing - Toddy Mladenov, Flora Taagen & Dallas Delaney, Microsoft
cloud securityapplication securitycryptography
Why Isn't the Fix in My Container? Tracking CVE Propagation Across 10,000 Projects - Mor Weinberger, Echo Security & Lior Kaplan, Kaplan Open Source
application securitycloud security
Detect, Decide, Defend: Building Cloud Native Security That Fights Back - Matthias Bertschy, ARMO
cloud securitydefensive security
When Multitenancy Goes Wrong: A Deep Dive Into Kcp's First CVE - Marvin Beckers, ClickHouse
cloud securityapplication security
Exploring NRI for Automated CA Trust Injection - Tsuzuki Tsuchiya & Kento Kubo, LY Corporation
cloud securitycryptography
Advanced Kyverno Patterns : Automating Platform Security and Operations - Frank Jogeleit, Nirmata; Johannes Sonner, Deutsche Telekom
cloud securityapplication securitygovernance and risk
Sovereign Identities for Your Cloud Native Architecture With Keycloak - Alexander Schwartz, IBM & Sebastian Łaskawiec, Defense Unicorns
identity and accesscloud security
Tailor Made: Dynamic Fine-Grained Authorization for API Traffic - Erica Hughberg, Tetrate & Andres Aguiar, Okta
identity and accessapplication securitycloud security
Audit-Ready Kubernetes: How Chase UK Leveraged Policy as Code for Continuous Compliance - Jim Bugwadia, Nirmata & Nischay Goyal, JP Morgan Chase
cloud securitygovernance and risk
Kubernetes Third Party Audit Review - Iain Smart, AmberWolf; Amir Montazery, Open Source Technology Improvement Fund; Rey Lejano, Red Hat; Tabitha Sable, Datadog; Pietro Tirenna, Shielder
cloud securityoffensive securityapplication security
Automating and Scaling of Threat Modelling for Cloud Native Architecture - Hanna Papirna & Emma Yuan Fang, EPAM Systems
application securitycloud security
How To Break Multi-Tenancy Again and Again ...and What We Can Learn From It - Lorin Lehawany & Sven Nobis, ERNW
offensive securitycloud security
Strengthening CNCF Projects: Impact of Security Self-Assessments - Eddie Knight, Sonatype; Bradley Andersen, k8gb; Justin Cappos, New York University; Shuting Zhao, Nirmata; Orlin Vasilev, SUSE
application securitycloud securitygovernance and risk
📚 Tutorial: Attack Defense: Leverage eBPF To Reveal Attack Flows With Rich Context - Constanze Roedig, fusioncore.ai; Markus Gierlinger, Independent; Teodor Janez Podobnik, Prewave GmbH
defensive securitycloud securityoffensive security
Bob and Alice Revisited: Understanding Encryption in Kubernetes - Jackie Maertens & Mitch Connors, Microsoft
cryptographycloud securitynetwork and infrastructure
In Falco's Nest: The Evolution of Cloud Native Runtime Security - Iacopo Rozzo, Sysdig; Aldo Lacuku, Kong Inc.
defensive securitycloud security
SPIFFE Meets OAuth: Federated Identity for Cloud Native Workloads - Yoshiyuki Tabata, Hitachi, Ltd.
identity and accesscloud security
WIT Happens: Exploring the Latest Evolution of the SPIFFE and WIMSE Workload Identity Standards.
identity and accesscryptographycloud security
Kubernetes Security at Shopify Scale: Automating Security Across an Infrastructure Monorepo - Jie Wu & Pulkit Garg, Shopify
cloud securityapplication securitygovernance and risk
Why Security of Kubernetes Comes Down to Linux Security - Marina Moore, Edera
cloud securitydefensive security
What LLMs Do, and Don't, Know About Securing Kubernetes - Rory McCune, Datadog
cloud securityai securityoffensive security
The Shared Service Blueprint: A Guide to Multi-Tenancy, Illustrated With KEDA - Aya Igarashi, Preferred Networks, Inc.
cloud securityidentity and accessgovernance and risk
Automate Once, Run Anywhere: The Docker Moment for Security Workflows - Nancy Chauhan & Aseem Shrey, ShipSecAI
application securitydefensive securitycloud security
SB💣💣M: Making SBOMs Play Together - Jacopo Bufalino, CNAM & Agathe Blaise, Thales SIX GTS France
application securitycloud securitygovernance and risk
Privacy as Infrastructure: Declarative Data Protection for AI on Kubernetes - Joaquin Rodriguez, Microsoft & Krishnendu Dasgupta, AXONVERTEX AI
cloud securityai securitygovernance and risk
Hacking GPU Observability: eBPF & Ephemeral Containers in Action on Kubernetes - Brandon Kang, Akamai Technologies
cloud securitydefensive security
Invisible Guardrails: Enabling Developer Velocity With a Secure Platform - James Elías Sigurðarson & Vignir Hafsteinsson, Asana
cloud securityapplication securityidentity and access
A Bug's-Eye View: Kubernetes SIG Security Explains It All - Ian Coldwater, Independent; Tabitha Sable & Rory McCune, Datadog; Iain Smart, AmberWolf; Mahé Tardy, Isovalent at Cisco
cloud securityapplication securitydefensive security
Cert-manager – Project Update: Beyond 2026 - Tim Ramlot & Maël Valais, Palo Alto Networks
cryptographycloud securityapplication security
Policy Engines for Kubernetes: Picking One Without Losing Your Mind - Nabarun Pal, Broadcom
cloud securitygovernance and risk
Hack Me If You Can: Learning Kubernetes Security Through a Role-Play Battle - Aoi Takahashi, Recruit Co., Ltd. & Keita Mochizuki, NTT DATA Japan Corporation
cloud securityoffensive securityapplication security
Harbor Project - The Maintainers Session - Yan Wang, Broadcom & Vadim Bauer, 8gears
application securitycloud security
NDC Security 2026
3 talksBeyond the Commit: Weaponizing and Hardening GitHub Actions
application securitycloud security
MCP Security: Keep Your AI Agents from Spilling the Tea
ai securitycloud securityidentity and access
Anti-Patterns: How to Not implement a Cloud Security tool
cloud security
DefCamp 2025
3 talksNo keys, no scanners: Black-Box Hacking of AWS Environments at DefCamp 2025
cloud securityoffensive security
Breaking the Cloud: Finding and Exploiting Misconfigurations in AWS at DefCamp 2025
cloud securityoffensive security
Containing the Threat: Analyzing cryptomining campaigns at DefCamp 2025
malware and threat intelcloud security
DEF CON® 33 Hacking Conference
5 talksMetal-as-a-Disservice: Exploiting Legacy Flaws in Cutting-Edge Clouds
offensive securitycloud securitynetwork and infrastructure
Edge of Tomorrow: Foiling Large Supply Chain Attacks By Taking 5k Abandoned S3 Buckets from Malware and Benign Software
application securitycloud securitymalware and threat intel
Client or Server? The Hidden Sword of Damocles in Kafka
application securitycloud security
Rusty pearls: Postgres RCE on cloud databases
offensive securitycloud security
Breaking the Chain: Advanced Offensive Strategies in the Software Supply Chain
offensive securityapplication securitycloud security
Black Hat USA 2025
6 talksBreaking Out of The AI Cage: Pwning AI Providers with NVIDIA Vulnerabilities
cloud securityoffensive security
ECS-cape – Hijacking IAM Privileges in Amazon ECS
cloud securityidentity and access
Azure's Weakest Link? How API Connections Spill Secrets
cloud securityoffensive security
Digital Dominoes: Scanning the Internet to Expose Systemic Cyber Risk
governance and riskcloud security
Kernel-Enforced DNS Exfiltration Security: Framework Built for Cloud Environments to Stop Data Breaches via DNS at Scale
defensive securitycloud security
Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications
identity and accesscloud security
OWASP Global AppSec USA 2024
4 talksThe Container Escape Room: An Exploration of Container Escapes
cloud securityoffensive securitydefensive security
OWASP Serverless Top 10
application securitycloud security
Automatic application hardening by leveraging container runtime behavior analysis during CI processes
cloud securityapplication securitydefensive security
AI Goat: A Damn Vulnerable AI Infrastructure
ai securitycloud securityoffensive security