Securing Multi-Cluster Cassandra and GenAI Deployments
summary
Wiz reports over 40% of the Fortune 100 as customers and shows concrete failures: an EC2 “patient zero” exploited with Dirty Cow leads to four keys found, one that creates an IAM user and lets attackers reach an RDS in minutes; exfiltration appears within hours. Public S3 exposures are weaponized in 7 hours from a GitHub leak and 38 TB once by Microsoft highlights AI risk. The demo maps full attack paths from Cassandra CVEs and misconfigurations through roles and buckets, then automates tickets and Slack/Jira workflows to prioritize and remediate.
AI-written summary · about
chapters (8)
- 0:00Cloud security challenges
- 1:05Key cloud security transformations
- 4:37Modern cloud attack anatomy
- 8:08Quick Cow attack example
- 10:38Attack path identification
- 15:57Cassandra cluster vulnerabilities demo
- 19:32Securing GenAI deployments
- 22:23Cloud security best practices
related talks
40mBreaking Managed Data Services in the Cloud
32mDo This, Not That – Lessons from 7 Headline Grabbing Security Breaches
33mCloud Hacking Scenarios
51mWho Gave the Agent Admin Rights?! Securing Cloud & AI Machine Identities
20mSecurity, and AI... so happy together?
22mFireside Chat - AI Security Vulnerabilities
12mSecuring AI-Driven Finance
16mLessons from the SOC: Analyzing and remediating cloud attack paths