Talks·35 min
Mike McCabe
Shows how Terraform pipelines can be abused to run code, leak credentials and escalate cloud privileges, plus defenses.
cloudinfrastructureattack+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 342 talks in the archive.
1–2 of 2 talks
Talks·35 min
Mike McCabe
Shows how Terraform pipelines can be abused to run code, leak credentials and escalate cloud privileges, plus defenses.
Talks·45 min
Mike McCabe · Ken Toler
Shares lessons from securing cloud migrations at financial firms, covering infrastructure as code checks and basic controls.