Anticipate and Defend Against Advanced Adversaries Targeting SaaS and IaaS
summary
Covers common attack scenarios against SaaS and IaaS—including misconfigured APIs, over‑exposed sensitive data, and shadow admins—and examines where attackers look for high‑value weak defenses. Describes concrete steps organizations can take to secure their SaaS and IaaS environments.
AI-written summary · about
chapters (11)
- 0:00Start
- 3:03Broken Access Control Takes the Crown in 2021
- 4:15SaaS challenges
- 9:48Salesforce Community API misconfiguration
- 11:32Check for misconfigurations
- 13:37What you can do to fix the exposure
- 16:00Einstein's Wormhole
- 22:21SSO is the new (h)Active Directory
- 24:31Attack Flow
- 33:20Why Use Reverse Web Proxy Technique
- 35:47One more thing...
related talks
46mCritical SaaS, Critical Blind Spots: A Detection Engineer's Field Guide to SaaS Attacks
46mHow to Adapt to Security Changes in Cloud SaaS Transformation
29mMapping the SaaS Attack Surface
48mTwo Steps Forward for SaaS Adoption, One Step Back for Security
21mSecuring the Next-Generation Data Center
39mCan Saas Ever Be Secure?
31mUnderstanding Cloud Control Plane Compromise Attacks
58mCloud Attack Surface Management