FIRST · 202537th-annual-first-conferenceadvanced
Search
Search talks
Shareable results across the archive. Difficulty is beginner, intermediate, advanced, or expert.
Filters+
Year
Conference
Track
Difficulty
Topic
Showing the most common topics.
FIRST · 202537th-annual-first-conferenceadvanced
Aztronomy: Establishing the Foundation of Attack Path Analysis in Azure
FIRST · 202537th-annual-first-conferenceadvanced
Broken Seals, Broken Trust: Flaws and Defences in the Certificate Ecosystem
Broken Seals · Broken Trust
FIRST · 202537th-annual-first-conferenceintermediate
Enhancing Incident Response with AWS CIRT, MSSPs, and ISVs
FIRST · 202537th-annual-first-conferenceintermediate
Maximizing the Potential of AWS-WAF
CODE BLUE · 2025code-blueintermediate
[CB22]CloudDragon’s Credential Factory is Powering Up Its Espionage Activities Against All the ...
CODE BLUE · 2025code-blueintermediate
[CB23]The Dark Side of Cloud Computing: How Threat Actors Abuse Millions of Dollars of Cloud Compute
CODE BLUE · 2025code-blue-2025
[CB25]Cloud-Wide Contamination: Chaining SSRFs for Tenant Compromise in Azure (CVE-2025-29972)
CODE BLUE · 2025code-blue-2025
[CB25]Don't judge an audiobook by its cover: taking over your Amazon account with a Kindle
CODE BLUE · 2025code-blue-2025
[CB25]Exploiting Blind Memory Corruption in Cloud Services
FIRST · 2025first
Critical SaaS, Critical Blind Spots: A Detection Engineer's Field Guide to SaaS Attacks
FIRST · 2025first
Cyberespionage: Targeted Attacks Abusing Third-Party Cloud Services
FIRST · 2025firstintermediate
Madness of Vulnerability Management in Modern Cloud, Container, How to Win the Battle...
Frank · James
FIRST · 2025first
Remediation-Aware Reachability: Patching Containers, Prioritizing with Agentic-CTI, and Scaling...
FIRST · 2025first
Streamlining Vulnerability Management: The Power of VEX Inheritance in Container Ecosystems
FIRST · 2025first
Technical Recovery Plan (TRP) Exercise in a Cloud-Native Environment: Practical Lessons ...
FIRST · 2025first
Weaving a VEX Feed Through the Kubernetes Project
MICROSOFT · 2025microsoft-security-response-center-msrc
BlueHat 2026: Gotta catch 'em all: Hunting Azure anonymous functions in the wild
MICROSOFT · 2025microsoft-security-response-center-msrc
BlueHat Asia: Cross-tenant RCEs at scale: Breaking Azure and getting caught
MICROSOFT · 2025microsoft-security-response-center-msrc
BlueHat Asia: From alert to disruption: Evidence-driven risk assessment for OAuth cloud applications
MICROSOFT · 2025microsoft-security-response-center-msrc
BlueHat Oct 23. S12: The New SaaS Cyber Kill Chain
MICROSOFT · 2025microsoft-security-response-center-msrc
BlueHat Oct 23. S20: Unmasking Azure Based Adversaries
MICROSOFT · 2025microsoft-security-response-center-msrc
BlueHat Oct 23. S23: Inside MSRC Cloud Vulnerability Management
MICROSOFT · 2025microsoft-security-response-center-msrc
BlueHat Seattle 2019 || I'm in your cloud: A year of hacking Azure AD