Guest: Vladi Sandler, Co-Founder & CEO, Gafnit Amiga, VP of Research, Lightspin
Topic: Researching Cloud giants security mechanisms
Language: English
Abstract
The leading cloud providers these days are storing growing parts of human knowledge and businesses , and therefore their services require to be top notch in security and most of the time, they actually provide very resilient security services. But every now and then, a talented security researcher finds vulnerabilities even on the most mature services - In this episode we spoke with Vladi Sandler & Gafnit Amiga from Lightspin regarding the AWS RDS vulnerability they recently discovered and what is the process of researching cloud provider vulnerabilities and how to do responsible disclosure. As a bonus, we also discussed the open-source tools released by Lightspin and the way they can help organizations protect their cloud resources.
https://blog.lightspin.io/aws-rds-critical-security-vulnerability
https://recon.cloud - Free CNAPP tool
https://github.com/lightspin-tech/red-detector - EC2 vulnerability scanner
https://github.com/lightspin-tech/red-kube - K8S Adversary Emulation
Attendees Guest: Eitan Satmary Guest Title: CISO Company: Tufin Abstract Being a CISO is challenging, being a CISO at a security vendor is even...
Attendees Guest: Or Kamara Guest Title: Senior team lead Company: Synk Abstract Cloud computing can bring interesting and new attack vectors. In this episode,...
Attendees Guest: Ory Segal, Puresec Guest title: CTO & Co-Founder at PureSec Company: Puresec is the global leader in serverless architectures security. Serverless functions...