Hack the Cloud Hack the Company: the Cloud Impact on Enterprise Security
summary
Attacker‑modeled penetration tests show cloud services becoming easy pivots rather than safe havens: simple Excel macro payload and targeted spearphishing yield credentials, single‑factor logins let attackers use Office 365 admin PowerShell to add mailbox permissions, unpatched IaaS images and shared admin passwords enable pass‑the‑hash to grab domain SAMs, and a compromised cloud DC leads to domain trust traversal into on‑premises systems; MFA and key management matter, and encryption gateways (ciphercloud valle teeth) reduce but do not eliminate risk.
AI-written summary · about
chapters (16)
- 0:00Start
- 7:17Review of Cloud Service Types
- 11:19Cloud vs. On-Prem Deployments
- 23:45Single Password Guess
- 24:51The Spear Phishing Attack
- 27:36The Social Engineering Attack
- 28:20Who's Using Office 365?
- 29:24Accessing SharePoint in the Cloud
- 29:48Accessing Cloud Storage
- 31:10Accessing Enterprise Email (as an Admin!)
- 33:29All Your (Cloud) Data Centers are Belong to Us
- 36:15A Good Old Fashioned Citrix Hack
- 38:01Lessons Learned for the Enterprise
- 39:38General Control of Assets
- 42:51Authentication & Access Control
- 45:38Summary & Close
related talks
33mCloud Hacking Scenarios
36mCloud Hacking Scenarios
48mLateral Movement in the Age of Hybrid Cloud
31mCloud Threat Landscape - 2021
43mClouds in the forecast: CrowdStrike cloud risk report
43mDefending the Cloud: Securing Your Microsoft Data Workloads
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
18mSecuring cloud innovation: Lessons learned