0x10: Chris Farris - The Cloud is getting darker and more full of terrors
Evaluates 0x10: Chris Farris - The Cloud is getting darker and more full of terrors and evaluates key implications for security practitioners.
Summary
## Overview Chris Farris, Forward CloudSec organizer, tours major cloud breaches to separate customer misconfigurations from provider failures.
## Backup and Insider Disasters UniSuper lost visibility into $12 billion in pension assets when a GCP beta tool timed out and deleted cloud backups; off-cloud copies saved the fund. A former Cisco engineer deleted 456 WebEx VMs five months after termination—identified by IP, not stolen credentials.
## Metadata Service Abuse Capital One's breach exposed 100 million records via SSRF to the instance metadata service. Google mitigated metadata proxy bypass in 2013, Azure in 2017—Farris notes AWS lagged despite years of warnings.
## Takeaways Cloud security requires immutable off-platform backups, rapid credential revocation, IMDSv2-style protections, and skepticism about shared responsibility marketing.
Related talks
BSidesAugusta·33 min
Chris Farris
Presenters detail vulnerability discovery and exploitation in Chris Farris - The Cloud is Dark and Full of Terrors.
Videos·50 min
Jamie MacDonald
Jamie MacDonald investigates Securi-Tay 2020: A Practical Guide To Getting Security Right On AWS.
Hackers of CypherCon·27 min
Getting to asset inventory across IT, OT, cloud and remote environments Chris Kirsch | CypherCon 6.0
Security researchers examine technical aspects of Getting to asset inventory across IT, OT, cloud and remote environments Chris Kirsch | CypherCon 6.0.