PODCAST · education
fwd:cloudsec
by Fwd:cloudsec
fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security features, the pros and cons of different security strategies, and generally the types of things cloud practitioners want to know, but that don't fit neatly into a vendor conference schedule.
Episodes
-
No Way Out? C2 Through AWS Data Perimeter via Bedrock-AgentCore - Dan Gansel
Speaker: Dan Gansel Dan Gansel is a cloud security specialist with deep expertise in cloud API research, secure cloud solutions and architecture design. Dan has led cloud security research teams and has a track record of uncovering novel attack techniques in cloud environments. As a Security...
-
Velocity of a Whisper: When One Vulnerability Cascades Across Cloud Infrastructure - Albin Vattakattu & Ryan Nolette
Speakers: Albin Vattakattu & Ryan Nolette Albin leads the global Vulnerability Disclosure Program (VDP) for Amazon Web Services (AWS). He co-authored the inaugural AI security whitepaper, jointly published by AWS and SANS institute. Prior to AWS, Albin led incident response teams across North and...
-
Barbarians at the Gate: Visualizing and Blocking SDLC Infrastructure Threats with SITF - Shay Berkovich
Speaker: Shay Berkovich Shay is part of the Threat Research team in Wiz (now acquired by Google) working on various aspects of container and SDLC infrastructure security with the emphasis on (on one hand) Kubernetes emerging threats and (on another hand) CI/CD and VCS security posture. He worked...
-
Transforming Security Incident Metadata to Security Outcomes: the Threat Technique Catalog for AWS Journey - Cydney Stude & Steve de Vera
Speakers: Cydney Stude & Steve de Vera Cydney is a security researcher and incident responder on the AWS Customer Incident Response Team (CIRT). Cydney studies emerging attack patterns and focuses on translating real-world incident response metadata into actionable detection and prevention...
-
Slaying the Sprawl: A Hero’s Guide to Building (or Re-Forging) a Cloud Security Program Without a 20-Person Guild - Steve Turner
Speaker: Steve Turner Steve leads cloud security at Zelis Healthcare. He started his career through the trial by fire that is MSP life. He pivoted to securing everything from waste facilities and transportation infrastructure to huge financial services organizations, and even mixed in some…
more -
Schrödinger’s Detection: Finding the "Zombie" Rules in Your SIEM - Gowthamaraj
Speaker: Gowthamaraj Gowthamaraj Rajendran is a Threat Detection Engineer on Meta’s Infrastructure Security Monitoring team, where he focuses on building and operationalizing detections for large-scale surfaces. His work centers on translating real-world adversary behaviors into measurable...
-
Beyond the Checkbox: What Breaks When You Actually Stress-Test Cloud Incident Response - Matthew Harvey
Speaker: Matthew Harvey Matthew Harvey is a cloud security professional with 8+ years in cloud incident response and 15+ years in it Security. With a focus on incident response and system resilience, he leads technical "game days" to help organizations identify and bridge gaps in their security...
-
Do Apps Have Imposter Syndrome? Unmasking Token Theft Campaigns - Shahar Dorfman & Sapir Federovsky
Speakers: Shahar Dorfman & Sapir Federovsky Shahar is a threat intelligence researcher at Wiz, where she focuses on identifying and analyzing emerging cyber threats to enhance security defenses. Sapir is a security researcher specializing in identity security. Passionate about understanding how...
-
The Double Trouble: One Architectural Sin, Two Clouds, and a Universal Attack Technique for Data Hijacking - Yahav Festinger
Speaker: Yahav Festinger Yahav Festinger is a Cloud Security Researcher at Palo Alto Networks. As a key member of the Cloud Detection and Response (CDR) team, their work focuses on identifying novel attack vectors and tracking adversaries in real-time. Their career in security began at the…
more -
Artificial Intelligence 🤝 Natural Stupidity - Brandon Sherman
Speaker: Brandon Sherman Brandon Sherman is a walking, talking, and occasionally thinking bag of meat and water. This is more than what can be said of any LLM at present. When his boss is looking, he does Cloud Security at Temporal Technologies, Inc. where the goal is to build software as…
more -
Beyond the Perimeter: Retrofitting VPC-SC at Enterprise Scale - Priya Puranik & Akshay Mahajan
Speakers: Priya Puranik & Akshay Mahajan Priya Puranik is a Senior Security Engineer at Wayfair specializing in cloud infrastructure and governance. Her focus is on operationalizing cloud security and streamlining security processes for infrastructure deployment. Akshay is a seasoned technologist...
-
Data Perimeters: Beyond the Marketing - Matt Luttrell
Service-specific Guidance: https://github.com/aws-samples/data-perimeter-policy-examples/tree/main/service_specific_guidance Speaker: Matt Luttrell Matt is a Principal Security Engineer at AWS and spends most of his day working on IAM. Matt focuses on the customer experience of security - helping...
-
Paying More for Worse Security: An AWS Marketplace Horror Story - Corey Quinn
Speaker: Corey Quinn Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly...
-
I made AI agents apply for my Security Team. Then I gave the agents access to AWS. - Cole Horsman
Speaker: Cole HorsmanI've built and operated cloud security systems at Global Atlantic Financial and KKR before joining Sonrai Security as Field CTO. I've spoken at AWS re:Invent and re:Inforce on cloud identity, serves as CISO for ISSA Des Moines, and founded VibeDSM, an AI Builder Community. He...
-
Are We There Yet? Lessons from the 10 Year Cloud Security Ride - James Berthoty
Slides: https://docs.google.com/presentation/d/1uIO9UufUdU83CBaAwJb9aENqa2SBr-yIlntp5mk9vWw/Speaker: James BerthotyJames Berthoty is the Founder and Analyst at Latio, the only analyst firm that independently tests every product it reviews.With over a decade of engineering and security experience...
-
Observing Escalation Paths in Kubernetes - William Taylor
Blog: https://labs.reversec.com/posts/2026/06/observing-privilege-escalation-in-kubernetes Speaker: William Taylor Security consultant with a background in embedded engineering and DevOps, which has lead to an interest in mobile, Cloud, and Kubernetes security. I used to make things work; now I...
-
Lessons From Building a Cloud Attack Simulation Program - Pavel Lineitsev
Speaker: Pavel LineitsevPavel is a Senior Security Engineer on the Detection and Response team at Confluent, where he builds detection rules, designs logging pipelines, and investigates security incidents across multiple cloud providers. With nearly a decade of experience in cybersecurity, he has...
-
Azure Networking Dark Arts: The Implicit Paths Your Diagrams Don't Show - Achia Rosenfeld & Kobi Rubin
Speakers: Achia Rosenfeld & Kobi Rubin Achia Rosenfeld is a software engineer with 10 years of experience, currently at ACT Security. I specialize in the analysis of Azure cloud networks to design and develop innovative products. My work focuses on translating deep network research into…
more -
Discovering New AWS Privilege Escalation Paths with an AI-Driven Workflow - Seth Art
Speaker: Seth Art Seth Art is currently a Security Researcher & Advocate at Datadog. Prior to joining Datadog, Seth created and led the Cloud Penetration Testing practice at Bishop Fox. He is the author of pathfinding.cloud, an AWS IAM privilege escalation library, and has published many open...
-
Who Are the Robots? Uncovering AI Agents Identities - Ron Popov & Clément Notin
Speakers: Ron Popov & Clément Notin Ron Popov is a Senior Security Researcher at Tenable, where he spends his days untangling the complexities of modern cloud environments. With over seven years of experience, Ron comes from a background of on-prem networks and network security. Today, he focuses...
-
Context-Aware Authorization for Agentic Tool Calls (Agent Memory Informed Authorization) - Robert Chiniquy
Speaker: Robert Chiniquy Robert Chiniquy is an engineer at ConductorOne, where he builds identity governance systems for human and non-human actors. He co-founded ScaleFT, a Zero Trust access platform acquired by Okta in 2018, where he served as Founder in Residence and led Okta's first…
more -
Agentic Paved Roads: Shifting Security Left to the Machine That Thinks - Prahathess Rengasamy
Security MCP Server: https://github.com/rakshasa-1729/agentic-paved-roads/ Example security repo: https://github.com/rakshasa-1729/acme-security-repo Speaker: Prahathess Rengasamy Prahathess Rengasamy is a security engineer at xAI focused on security engineering and automation, striving to…
more -
The Tireless Guardian: Agentic AI and the Art of WAF at Scale - Ammar Alim
Speaker: Ammar Alim Ammar Alim is the Manager of DevSecOps at Adobe, where he leads a team building solutions that help engineering teams address security issues more efficiently, focusing on seamless integration between application security and DevOps processes. Previously, he was Cloud Security...
-
Who Did This? Identity and Accountability When Your Cloud Actors Aren't Human - Jie Wu & Pulkit Garg
Speakers: Jie Wu & Pulkit Garg Jie is a Senior Security Engineer on the Infrastructure Security team at Shopify, where she focuses on security automation, IAM, threat detection, and compliance. Prior to joining Shopify, Jie worked on cyber defense initiatives and vulnerability management at Bank…
more -
Least Privilege is a Conversation: Building an Agentic Role Engineering Pipeline - Alex Smolen
Slides: https://engseclabs.com/least-privilege-is-a-conversation/ Trailtool: https://github.com/engseclabs/trailtool Blog: https://engseclabs.com/blog/cloudtrail-for-ai-agents/ Speaker: Alex Smolen Security engineering leader with 15+ years experience building security programs from the ground…
more -
The domain takeover challenge: Detecting and defeating it at scale - Ramesh & Eli F
Speaker: Ramesh & Eli F Talk: Managing tens of thousands of DNS records across multiple cloud providers and registrars introduces significant risk—especially when bug bounty reports for domain takeover vulnerabilities begin to surge. Scaling remediation is both critical and complex. In this talk,...
-
Release the Kraken: Putting Tentacles on Your AI "Paved Road" - Sakina Mithani
Speaker: Sakina MithaniTalk:Agentic coding tools are the new frontier of developer velocity…but giving an autonomous agent access to your proprietary IP and an internet connection? Sounds like a data exfiltration nightmare. In the world of AI-assisted engineering, we found that exfiltration is...
-
Pattern matching and head scratching with our new friends The Neoclouds - Matthew Gladney
Speaker: Matthew Gladney Talk: Neoclouds are here whether we planned for them or not - and the security assumptions we carry over from the hyperscalers don't transfer cleanly. The IAM ergonomics and audit trails we'd taken for granted aren't a given. How are secrets stored? If you hand an AI…
more -
Stop Building Custom Agent Identity - Sarah Cecchetti
Speaker: Sarah Cecchetti & Clawdrey Hepburn (AI) Talk: Your agents need identity infrastructure. Real identity infrastructure — not a service account with a sticky note that says "this is the AI." Right now, every team building agentic systems is solving the same problem independently: how does…
more -
Stop Training Engineers to Ignore You: Cloud Security Alerting at Scale - Paul Benoit
Speaker: Paul Benoit Talk: Sending cloud security alerts at scale is an absolute minefield. False positives, wrong attribution, alert floods, missing context, stale findings, and unclear remediation expectations burn trust with the engineers who have to respond. The cloud makes it worse.…
more -
In git we trust: Defending Lovable projects from malicious code attacks at scale - Marcus Hallberg & Samuel Kelemen
Speaker: Marcus Hallberg & Samuel Kelemen Talk: This talk covers how the Lovable security team identified and tracked a global attack attempted to compromise our users' Github projects with malicious code. We analysed millions of Lovable projects across hundreds of thousands of customers and...
-
What Building an AI Worm Taught Us About Stopping One - Kinnaird McQuade
Speaker: Kinnaird McQuade Talk: In virology, gain-of-function research means deliberately making a pathogen more dangerous so you can study how to stop it. We took the same approach with AI coding agents and fine-tuned guardrail-less models - and built an AI worm. Unlike prompt injection research...
-
OCInferno: An Offensive Security Toolkit for OCI - Scott Weston
Speaker: Scott Weston Scott is a Labs Researcher at NetSPI. He has performed work in the past regarding open source tooling for AWS as well as GCP. He has spoken at past conferences including fwd:cloudsec and the Defcon Cloud Village. He has published a tool called gcpwn for GCP enumeration and...
-
Zapocalypse: Compromising every Zapier user through a Lambda memory leak - Yair Balilti
More on Zapocalypse: https://www.token.security/zapocalypse Slides: https://docs.google.com/presentation/d/1ex96KlF1vPJboHeVoRXg4hb5hUJ9h3QIvb_DQ8IJ0Kk/edit?usp=sharing Speaker: Yair Balilti I’m Yair Balilti, Security Research Team Leader at Token Security. With over 8 years of experience in...
-
Sub:jugation - Hijacking Cloud Identities by Recycling Namespaces in Global OIDC Issuers - Tal Skverer
Speaker: Tal Skverer Tal holds an M.Sc. in Computer Science and has a decade of experience in reverse engineering, web hacking and cryptography. Tal is the Head of Research at Astrix Security, where he leads security research focused on non-human identity and AI agents. His work spans identity...
-
Push-Pull-Pwn: Hacking the Cloud through Container Registry Poisoning - Hillai Ben-Sasson & Nir Ohfeld
Speaker: Hillai Ben-Sasson & Nir Ohfeld Hillai Ben-Sasson (@hillai) is a Security Researcher based in Israel. As part of the Wiz Research Team, Hillai specializes in research and exploitation of web applications, application security, and finding vulnerabilities in complex high-level systems....
-
2026 Introduction - Patrick Sanders
An introduction to fwd:cloudsec North America 2026 by Patrick Sanders
-
Defenders hate it! Compromise vulnerable SaaS applications with this one weird trick (Eric Woodruff)
https://youtu.be/rQxc9N4gBqA Speaker: Eric WoodruffThroughout his 25-year career in the IT field, Eric has sought out and held a diverse range of roles. Currently the Chief Identity Architect for Semperis; Eric previously was a member of the Security Research and Product teams. Prior to Semperis,...
-
Putting Workload Identity to Work: Taking SPIFFE past day 0 (Dave Sudia)
https://youtu.be/oHlPGzpFT_c Speaker: Dave SudiaDave Sudia went from Platform Engineering to Product Engineering; in both roles he has had to stand up infrastructure in repeatable but constantly evolving architectures, taking into account usability, security, and scalability. He is the world's...
-
Happy Little Clouds: Painting Pictures with Microsoft Cloud and Identity Data (Matt Graeber)
https://youtu.be/nwYzVTL8Y4Y Speaker: Matt GraeberMatt is a threat researcher focused on detecting Microsoft cloud and identity threats. Coining the term and establishing the strategy of "living off the land" in 2013 along with Chris Campbell, he has an extensive history of identifying ways to...
-
Introducing GRC Engineering: A New Era of AWS Compliance (AJ Yawn)
https://youtu.be/nEM7z266D6o Speaker: AJ YawnAJ Yawn is an experienced cybersecurity leader specializing in cloud compliance, governance, risk, and compliance (GRC) engineering, with nearly 15 years of experience. AJ currently serves as Director of GRC Engineering at Aquia, leading innovative...
-
Staying Sneaky in the Office (365) (Christian Philipov)
https://youtu.be/l5lpIF_QZCE Speaker: Christian PhilipovChris is a principal security consultant and leads the specialist services within Reversec. As part of his day to day he leads the global team that deals with various different types of engagements of both a transactional and more bespoke...
-
Not So Secret: The Hidden Risks of GitHub Actions Secrets (Amiran Alavidze)
https://youtu.be/k3DBur7iEHM Speaker: Amiran AlavidzeAmiran is a passionate product security professional with over 20 years of experience spanning systems engineering, security operations, GRC, and product and application security. As a security engineering leader, he champions a pragmatic,...
-
Trust Issues: What Do All these JSON files actually mean? (David Kerber)
Speaker: David KerberDave is an engineer and longtime AWS practitioner with a focus on IAM and AWS security tooling. He’s led product and engineering teams at startups and billion-dollar companies, raised millions from VCs, built two CSPMs, and now consults on AWS security for Fortune 500...
-
Inviter Threat: Managing Security in a new Cloud Deployment Model (Meg Ashby)
https://youtu.be/ilnOvSV0QtY Speaker: Meg AshbyMeg does cloud security for Alloy, a fintech in NYC. Previous to Alloy she worked at Marcus by Goldman Sachs, but that was way less fun. At Alloy, Meg does IAM, networking, data, and kubernetes security (and everything else related or...
-
I Didn’t Register for This: What’s Really in Google’s Artifact Registry? (Moshe Bernstein)
https://youtu.be/hHe9cKfSfqI Speaker: Moshe BernsteinMoshe is a Senior Security Researcher specializing in cloud vulnerability research at Tenable Cloud Security. With nearly a decade of experience in cybersecurity, Moshe has developed a strong focus on network and operational security, web...
-
No IP, No Problem: Exfiltrating Data Behind IAP (Ariel Kalman)
https://youtu.be/g-XCNobgvaM Speaker: Ariel KalmanAriel Kalman is a cloud security researcher based in Israel, actively engaged in cloud-related security research at Mitiga. With a specialization in application security, Ariel excels in discovering new attack vectors associated to cloud...
-
Rebuilding ROADRecon for the Modern Entra Environment (Thomas Byrne)
https://youtu.be/dTUeAhzmIu8 Speaker: Thomas ByrneThomas is a security consultant at Reversec. He has experience in a range of areas including application, network and cloud security. He focuses his time mainly on Azure, DevOps and researching cloud specific vulnerabilities outside of…
more -
Inside Microsoft's Battle Against Cloud-Enabled Deepfake Threats (Alessandro Brucato)
Speaker: Alessandro BrucatoAlessandro is a senior Threat Research Engineer at Sysdig, working on cloud security. His research mainly focuses on cloud threats and supply chain attacks. In addition to research, he’s keen on bug bounty programs and has received rewards from several large companies....
-
Patience brings prey: lessons learned from a year of threat hunting in the cloud (Greg Foss)
Speaker: Greg FossGreg Foss is a seasoned cybersecurity leader with over 15 years of experience spanning threat research, security operations, and offensive security. As the Engineering Manager of Threat Detection Engineering at Datadog, he leads a team of elite threat hunters and detection...
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security features, the pros and cons of different security strategies, and generally the types of things cloud practitioners want to know, but that don't fit neatly into a vendor conference schedule.
HOSTED BY
Fwd:cloudsec
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does fwd:cloudsec have?
fwd:cloudsec currently has 50 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is fwd:cloudsec about?
fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security features, the pros and cons of different security strategies, and generally the types of things...
How often does fwd:cloudsec release new episodes?
fwd:cloudsec has 50 episodes. Check the episode list to see recent publication dates and frequency.
Where can I listen to fwd:cloudsec?
You can listen to fwd:cloudsec on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts fwd:cloudsec?
fwd:cloudsec is created and hosted by Fwd:cloudsec.
URL copied to clipboard!