Search talks

CODE BLUE · 2025code-blueintermediate

[CB22]CloudDragon’s Credential Factory is Powering Up Its Espionage Activities Against All the ...

CODE BLUE · 2025code-blueintermediate

[CB23]The Dark Side of Cloud Computing: How Threat Actors Abuse Millions of Dollars of Cloud Compute

CODE BLUE · 2025code-blue-2025

[CB25]Cloud-Wide Contamination: Chaining SSRFs for Tenant Compromise in Azure (CVE-2025-29972)

CODE BLUE · 2025code-blue-2025

[CB25]Don't judge an audiobook by its cover: taking over your Amazon account with a Kindle

CODE BLUE · 2025code-blue-2025

[CB25]Exploiting Blind Memory Corruption in Cloud Services

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat 2026: Gotta catch 'em all: Hunting Azure anonymous functions in the wild

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Asia: Cross-tenant RCEs at scale: Breaking Azure and getting caught

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Asia: From alert to disruption: Evidence-driven risk assessment for OAuth cloud applications

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Oct 23. S12: The New SaaS Cyber Kill Chain

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Oct 23. S20: Unmasking Azure Based Adversaries

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Oct 23. S23: Inside MSRC Cloud Vulnerability Management

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Seattle 2019 || I'm in your cloud: A year of hacking Azure AD

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Seattle 2019 || Kubernetes Practical Attack and Defense

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v17 || Born Secure. How to Design A Brand New Cloud Platform With A Strong Security Posture

MICROSOFT · 2025microsoft-security-response-center-msrc

From access patterns to attack paths: Uncovering hidden cloud attack paths for end-to-end protection

MICROSOFT · 2025microsoft-security-response-center-msrc

Zero Day Quest training: Cloudy with a chance of SSRF

HITB · 2024hack-in-the-box-security-conference

#HITB2012KUL D2T2 - John Viega - Crypto for the Public Cloud

John Viega

HITB · 2024hack-in-the-box-security-conference

#HITB2016AMS D1T1 - Escape From The Docker KVM QEMU Machine

Shengping Wang · Xu Liu

HITB · 2024hack-in-the-box-security-conference

#HITB2017AMS COMMSEC D1 - Breaking Apple's iCloud Keychain

Vladimir Katalov

HITB · 2024hack-in-the-box-security-conference

#HITB2017AMS KEYNOTE 2 - All Fall Down: Interdependencies In The Cloud

Window Snyder

HITB · 2024hack-in-the-box-security-conference

#HITB2018DXB D1T2: Extracting Messages From iCloud

Vladimir Katalov

HITB · 2024hack-in-the-box-security-conference

#HITB2021AMS COMMSEC D2 - AWS GuardDuty: Post-DNS Era Covert Channel For C&C

Sze Siong Teo

HITB · 2024hack-in-the-box-security-conference

#HITB2021AMS D2T1 - Dissecting Phishing Techniques Of CloudDragon APT

Linda Kuo · Zih-Cing Liao

HITB · 2024hack-in-the-box-security-conference

#HITB2021AMS D2T2 - Attacking Cloud Native Kubernetes With CDK

Zebin Zhou · Yue Xu