Skip to content

Details

Join us this month for two cloud cyber security talks!

Attack and Defense, by Andy Thompson and Len Noe

Len Noe is one of CyberArks WhiteHat Hackers and a member of the Global Enablement Team. Len is an International security speaker and has been with CyberArk for over 7 years.
Andy Thompson (@R41nM4kr) is a member of the CyberArk Labs team and is a vital part of the continuing threat research. Andy is a GIAC certified Pen Tester and is very active in the local Texas Security scene.

The key to a successful attack is having the right tools for the job. In this session, the audience will learn about frequently-used tools and methods used by attackers. The session will feature demonstrations of real team exploits and hacking hardware – and an in-depth look at how hackers can compromise and exfiltrate.
We be providing high level overviews of the 6 attacks that will be shown.

  1. Compromising cloud environments via the CLI
  2. Attacking cloud instance metadata
  3. Leveraging cloud shadow admin access
  4. Compromising the cloud via the developer endpoint O.MG Cable
  5. Attacking Developers Endpoints with trojan binaries
  6. WHID Cactus – Wireless Human Interface Device Attacks

Cloud Fraud, by Chris Compton and Maggie Whorf

Chris Compton is the Director of Anti-Fraud at Oracle, where he helps defend Oracle's Cloud Infrastructure against thieves and fraudsters. He's previously worked in the fraud and security defensive spaces for Microsoft, Amazon, and Xbox. Prior to that, he was a security engineer in the government space at MITRE. He holds an MS in Computer Security from the George Washington University.
Maggie Whorf is a Senior Fraud Manager at Oracle with a focus on Data and Investigations. She has over 15 years of experience fighting fraud in e-commerce spaces, including Yahoo!, Microsoft, and Azure.

We will address:
Why fraudsters do what they do

  • Money, gig economy, etc.
  • World events driving fraud patterns: Worldwide GPU shortage and pandemic
    How fraudsters to what they do
  • Stolen credentials, payment instruments, social engineering
    How to spot fraud and mitigate risk
  • How to strategically google info given by customers
  • Automation through rules and ML
  • Human investigation

Remember, we are looking for venues to go back to in person meetings again, if you have one that can regularly accommodate 30-120 people let us know at austin-cug-admin@googlegroups.com.

Also, next month is the big lightning talk meeting, the Dog Days of DevOps - we need everyone to sign up to do a 5 minute demo or talk! Just sign up in the comments for the meetup here: https://www.meetup.com/CloudAustin/events/pljpfrycclbwb/

You may also like