whoAMI: Discovering and exploiting a large-scale AMI name confusion attack

Discovering and exploiting large-scale AMI name confusion attacks across the AWS ecosystem.

Summary

This talk covers exploitation techniques and vulnerability analysis in computer systems.

Shani Peled

Exploiting AWS SageMaker to gain persistence and exfiltrate data from ML platforms.

cloudai-securityaws+1

Gowthamaraj Rajendran

Building cross-cloud kill chain detections for AWS, Azure, and GCP attacks.

cloudblue-teamaws+2

Leo Tsaousis

Exploiting AWS Cognito misconfigurations to achieve privilege escalation and account takeover.

cloudawsiam+1