Share on

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts

REGISTER

Talk overview:

Imagine taking over an entire AWS account with just an account ID. In this session, we’ll reveal attack vectors that led to the discovery of multiple critical vulnerabilities in AWS, exposing paths to remote code execution, account takeovers, and data leaks. You’ll learn how we uncovered these issues, how to detect them in your own environment, and actionable steps to enhance cloud security.

In this session, we will:

  • Explore vulnerabilities in AWS services, including CloudFormation, Service Catalog, Glue, EMR, SageMaker, CodeStar,  CDK and more
  • Demonstrate how attackers can abuse default roles to elevate privileges and execute code remotely.
  • Show real-world exploitation scenarios and discuss the methodology used to uncover these weaknesses.
  • Provide actionable insights for cloud security practitioners on detecting and mitigating these risks.

Attendees will leave with a deeper understanding of the security risks associated with default AWS roles and shadow resources, as well as practical strategies to protect their environments from these emerging threats.

Assaf is the Director of Threat Intelligence at Aqua Nautilus, where is responsible of acquiring threat intelligence related to software development life cycle in cloud native environments, supporting the team’s data needs, and helping Aqua and the broader industry remain at the forefront of emerging threats and protective methodologies. His research has been featured in leading information security publications and journals worldwide, and he has presented at leading cybersecurity conferences. Notably, Assaf has also contributed to the development of the new MITRE ATT&CK Container Framework.
REGISTER
Assaf Morag
Director of Threat Intelligence at Aqua Nautilus
Assaf is the Director of Threat Intelligence at Aqua Nautilus, where is responsible of acquiring threat intelligence related to software development life cycle in cloud native environments, supporting the team's data needs, and helping Aqua and the broader industry remain at the forefront of emerging threats and protective methodologies. His research has been featured in leading information security publications and journals worldwide, and he has presented at leading cybersecurity conferences. Notably, Assaf has also contributed to the development of the new MITRE ATT&CK Container Framework.