From keyless to careless: Abusing misconfigured OIDC authentication in cloud environments
Where
Breaking Ground
BSides Las Vegas
Duration
17 min
Demonstrates how misconfigured OIDC authentication in cloud environments can be abused to gain access.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Breaking Ground·47 min
Michael Bargury
Shows how Azure AD guest accounts can reach corporate SQL data and shared connections, and how to harden them.
cloudidentityattack+2
Common Ground·24 min
Kat Traxler
Compares provider-managed non-human identities across AWS, Google Cloud and Microsoft, and where each one is vulnerable.
cloudidentityvulnerabilities+2
Talks·35 min
Mike McCabe
Shows how Terraform pipelines can be abused to run code, leak credentials and escalate cloud privileges, plus defenses.
cloudinfrastructureattack+2