Cloud Village·20 min
Danielle Aminov · Yaara Shriki
How misconfigured authentication allows unauthenticated access to cloud resources.
cloudazureauthentication+1
DEF CON 33/Cloud Village across years
Cloud Village DC33
Las Vegas Convention Center · 8–10 August 2025 · 24 talks
DEF CON 33 Cloud Village talks covering cloud security offense and defense across AWS, Azure, GCP, and Kubernetes environments.
1–24 of 24 talks
Cloud Village·33 min
Jenko Hwong
Decoding the Storm-2372 threat actor campaign targeting cloud and identity infrastructure.
cloudthreat-intelmicrosoft+1
Cloud Village·28 min
Gowthamaraj Rajendran
Building cross-cloud kill chain detections for AWS, Azure, and GCP attacks.
cloudblue-teamaws+2
Cloud Village·27 min
Leo Tsaousis
Exploiting AWS Cognito misconfigurations to achieve privilege escalation and account takeover.
cloudawsiam+1
Cloud Village·23 min
Mark Manning
Practical Kubernetes security techniques for both offensive and defensive practitioners.
cloudkubernetesred-team+1
Cloud Village·19 min
Golan Myers
KIEMPossible: exploiting KIEM (Key Identity and Execution Manager) weaknesses in Azure environments.
cloudazureiam+2
Cloud Village·30 min
Viktor Gazdag
Attack surface analysis and abuse possibilities of Microsoft Azure Fabric services.
cloudazurered-team+1
Cloud Village·32 min
Crashwire · Nathan
Novel ESXi hypervisor persistence techniques for maintaining long-term access in cloud environments.
cloudvmwareesxi+2
Cloud Village·38 min
Alon Klayman · Eliraz Levi
Exposing the hidden risks of Azure Managed Identities and how attackers exploit unmanaged identities.
cloudazureidentity
Cloud Village·41 min
Marios Gyftos · Nikos Vourdas
Implementing and enforcing least-privilege IAM policies across cloud environments.
cloudiamleast-privilege+1
Cloud Village·18 min
Ariel Kalman
Exfiltrating cloud data from behind Google Identity-Aware Proxy without a public IP.
cloudgcpexfiltration+1
Cloud Village·23 min
Aviram · Uri Gutman
Lessons from building a scalable security platform on serverless cloud infrastructure.
cloudserverlesssecurity-engineering
Cloud Village·28 min
Michael Katchinskiy · Yossi Weizman
How official cloud installation scripts expose Kubernetes clusters and cloud environments to breach.
cloudkubernetesred-team+1
Cloud Village·39 min
Simon Maxwell-Stewart
Turning Azure subscription access into persistent backdoor access across tenants.
cloudazurered-team+1
Cloud Village·23 min
Madhu Akula
Spotter: a universal Kubernetes security engine for automated runtime threat detection.
cloudkubernetessecurity-tools+1
Cloud Village·23 min
Nevada · Kam
Evolving SquarePhish to weaponize QR codes for Entra ID Primary Refresh Token extraction.
cloudphishingentra-id+1
Cloud Village·20 min
Ryan O'Donnell
Designing effective honey tokens in Microsoft 365 to detect and attribute cloud intrusions.
cloudblue-teamdeception+1
Cloud Village·23 min
Muhammad Yuga Nugraha
TencentGoat: an intentionally vulnerable Tencent Cloud environment for hands-on cloud security training.
cloudred-teamlab-environment+1
Cloud Village·37 min
Hanna Papirna · Emma Yuan Fang
Scaling threat modeling to handle the complexity of modern multi-cloud architectures.
cloudthreat-modelingsecurity-engineering+1
Cloud Village·26 min
Filipi Pires
Combining AI and attack-path analysis to transform cloud identity protection.
cloudidentityai+1
Cloud Village·32 min
Gautam Peri
Dangling issuer vulnerabilities in federated cloud credentials and how to exploit them.
cloudazureidentity+1
Cloud Village·25 min
Shani Peled
Exploiting AWS SageMaker to gain persistence and exfiltrate data from ML platforms.
cloudai-securityaws+1
Cloud Village·41 min
Rodrigo Montoro
Weaponizing AWS Systems Manager for lateral movement and hardening techniques for defenders.
cloudawsssm+2
Cloud Village·31 min
Seth Art
Discovering and exploiting large-scale AMI name confusion attacks across the AWS ecosystem.
cloudawssupply-chain+1