Black Hat·37 min
Jenko Hwong
Engineers explore architecture and security mechanisms for IAM Concerned: OAuth Token Hijacking in Google Cloud (GCP).
iamoauthgcp
gcp
28 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 27 talks / 28 · loading…
Black Hat·41 min
Lateral Movement & Privilege Escalation in GCP; Compromise Organizations without Dropping an Implant
Security researchers examine technical aspects of Lateral Movement & Privilege Escalation in GCP; Compromise Organizations without Dropping an Implant.
privilege-escalationlateral-movementgcp
Black Hat·31 min
Colin Estep
Analysts investigate attack surfaces and defenses concerning Permission Mining in GCP.
gcpminingpermission
Cloud Village·18 min
Ariel Kalman
Exfiltrating cloud data from behind Google Identity-Aware Proxy without a public IP.
cloudgcpexfiltration+1
fwd:cloudsec·24 min
Paul Schwarzenberger
Paul Schwarzenberger details "Centralizing Identity across AWS, Azure and GCP".
azureawsidentity+1
fwd:cloudsec·25 min
Kat Traxler
Kat Traxler examines "GCP Primitive Roles, An indictment".
gcpprimitiverole+2
fwd:cloudsec·21 min
Colin Estep
Colin Estep details Permission Mining in GCP.
gcpminingpermission
fwd:cloudsec Europe 2025·26 min
Industry experts analyze emerging threats surrounding Source IP Spoofing in Cloud Logs: A Hands-On Look Across AWS, Azure, and GCP.
azureawsspoofing+1
fwd:cloudsec North America 2025·20 min
Presenters detail vulnerability discovery and exploitation in The Good, The Bad, and The Vulnerable: Breaking Down GCP Tenant Projects.
gcpvulnerablebreaking+1
fwd:cloudsec North America 2025·23 min
Engineers explore architecture and security mechanisms for What Do You Mean, ‘Resource Not Found?’ Demystifying GCP Error Codes for IR & Detections.
gcpmeanresource+1
PROIDEA Events·28 min
Paweł Kusiński
Paweł Kusiński investigates CONFidence 2022: Pwning AWS Lambdas & GCP Cloud Functions.
awsgcpconfidence+2
SAINTCON·48 min
Bryce Kunz
Industry experts analyze emerging threats surrounding 2019 - Bryce Kunz - May the Cloud be with You: Red Teaming GCP (Google Cloud Platform).
red-teaminggcpbryce+2
Security BSides San Francisco·30 min
Explores BSidesSF 2020 - The GCP Metadata API (Dylan Ayrey • Allison Donovan) and evaluates key implications for security practitioners.
gcpmetadatabsidessf+1
Black Hat USA·33 min
Liv Matan
Security researchers examine technical aspects of The GCP Jenga Tower: Hacking Millions of Google's Servers With a Single Package (and more).
gcpjengatower+3
Fortinet·9 min
Industry experts analyze emerging threats surrounding Securing Global Access with Fortinet and GCP's Network Connectivity Center | Cloud Security.
cloud-securitynetworkgcp
fwd:cloudsec Europe·25 min
Marcus Hallberg · Atilla Dulovics
Presenters detail vulnerability discovery and exploitation in GCP and AWS identity federation - lessons learned from the […] ~ Marcus Hallberg, Atilla Dulovics.
awsidentitygcp+1
fwd:cloudsec Europe·27 min
Presenters detail vulnerability discovery and exploitation in Service Agents and the Search for Transitive Access in GCP ~ Kat Traxler.
gcpservicesearch+2
fwd:cloudsec North America·24 min
Scott Weston
Scott Weston investigates GCPwn: A Pentesting Tool For GCP.
pentestinggcpgcpwn+1
fwd:cloudsec North America·22 min
Gabriel Fried
Gabriel Fried analyzes Who Touched My GCP Project? Understanding the Principal Part in Cloud Audit Logs.
gcptouchedproject+3
fwd:cloudsec·36 min
Randy Heins · Jeffrey Zhang
Randy Heins investigates Operationalizing GCP’s Asset Inventory for Cloud Enlightenment.
gcpoperationalizingasset+3
Main Stage·24 min
Sharon Brizinov · Tal Skverer
Tal Skverer details GhostToken, a critical zero-day vulnerability in Google Cloud Platform allowing third-party OAuth apps to become invisible and unremovable.
gcpoauthcloud+2
RSAC Cybersecurity·33 min
Security researchers examine technical aspects of Common Infrastructure Exploits in AWS/GCP/Azure Servers and Containers.
azureawsinfrastructure+2
BSidesCharm·26 min
Matt Maisel
2025 - Cyber Deception in GCP with Generative Traps.
deceptiongcpgenerative+1
NahamSec·30 min
Cloud Hacking: Google Cloud Platform (GCP).
gcpcloudgoogle+1