release-tampering-pocs: Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec Europe 2025
release-tampering-pocs: Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec Europe 2025
github.com
September 20, 2025 at 11:24 AM
release-tampering-pocs: Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec Europe 2025
Live streams from the fwd:cloudsec Europe 2025 security conference, which took place over the weekend, are available on YouTube
www.youtube.com/@fwdcloudsec...
www.youtube.com/@fwdcloudsec...
fwd:cloudsec
fwd:cloudsec is a non-profit, conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...
www.youtube.com
September 15, 2025 at 8:44 PM
Live streams from the fwd:cloudsec Europe 2025 security conference, which took place over the weekend, are available on YouTube
www.youtube.com/@fwdcloudsec...
www.youtube.com/@fwdcloudsec...
If you're into cloud security, fwd:cloudsec Europe is now live.
Schedule: fwdcloudsec.org/conference/e...
Schedule: fwdcloudsec.org/conference/e...
September 15, 2025 at 7:12 AM
If you're into cloud security, fwd:cloudsec Europe is now live.
Schedule: fwdcloudsec.org/conference/e...
Schedule: fwdcloudsec.org/conference/e...
fwd:cloudsec Europe 2025 - Day 1
YouTube video by fwd:cloudsec
youtube.com
September 15, 2025 at 7:07 AM
Just 2 hours to go before fwd:cloudsec Europe kicks off here in Berlin! 🇩🇪
We’ve got an incredible lineup of speakers this year covering the latest in cloud security, from IAM and supply chain risks to practical defense strategies.
We’ve got an incredible lineup of speakers this year covering the latest in cloud security, from IAM and supply chain risks to practical defense strategies.
September 15, 2025 at 4:40 AM
Just 2 hours to go before fwd:cloudsec Europe kicks off here in Berlin! 🇩🇪
We’ve got an incredible lineup of speakers this year covering the latest in cloud security, from IAM and supply chain risks to practical defense strategies.
We’ve got an incredible lineup of speakers this year covering the latest in cloud security, from IAM and supply chain risks to practical defense strategies.
Thank you for sharing. At fwd:cloudsec this year, we also provided transparency into our finances and many other things in our State of the Union address. We similarly pay way too much on food and coffee, but it is somewhat due to how US hotels charge.
www.youtube.com/watch?v=PH6w...
www.youtube.com/watch?v=PH6w...
August 17, 2025 at 12:33 PM
Thank you for sharing. At fwd:cloudsec this year, we also provided transparency into our finances and many other things in our State of the Union address. We similarly pay way too much on food and coffee, but it is somewhat due to how US hotels charge.
www.youtube.com/watch?v=PH6w...
www.youtube.com/watch?v=PH6w...
The lineup for fwd:cloudsec Europe is revealed, presenting a two-day event filled with top-tier presentations on a single track, alongside engaging "Birds of a Feather" discussion sessions. Sponsorship slots remain open.
fwdcloudsec.org/conference/...
See you there, folks! 🇩🇪
fwdcloudsec.org/conference/...
See you there, folks! 🇩🇪
fwd:cloudsec Europe 2025 | fwd:cloudsec
fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security features, the pros and cons of different security strategies, and generally the types of things cloud practitioners want to know, but that don't fit neatly into a vendor conference schedule.
fwdcloudsec.org
August 7, 2025 at 6:54 AM
The lineup for fwd:cloudsec Europe is revealed, presenting a two-day event filled with top-tier presentations on a single track, alongside engaging "Birds of a Feather" discussion sessions. Sponsorship slots remain open.
fwdcloudsec.org/conference/...
See you there, folks! 🇩🇪
fwdcloudsec.org/conference/...
See you there, folks! 🇩🇪
Securing Remote MCP Servers. Includes video of presentation at fwd:cloudsec | by Jake Berkowsky | Jul, 2025
medium.com/@JakeBerkows...
medium.com/@JakeBerkows...
Securing Remote MCP Servers
A summary of a recent conference talk about securing MCP Servers.
medium.com
August 5, 2025 at 4:24 PM
Securing Remote MCP Servers. Includes video of presentation at fwd:cloudsec | by Jake Berkowsky | Jul, 2025
medium.com/@JakeBerkows...
medium.com/@JakeBerkows...
Our favorite talks from fwd:cloudsec 2025
fwd:cloudsec 2025: Connecting with the cloud security community
Red Canary’s cloud security enthusiasts left fwd:cloudsec 2025 with some invaluable insights and community connections
redcanary.com
July 30, 2025 at 5:28 PM
Our favorite talks from fwd:cloudsec 2025
In this special episode of hashtag#ModernCyber, join Jeremy at fwd:cloudsec Denver, as he chats with Veradigm cloud leaders Kyler Middleton and Sai Gunaranjan about securing AI in enterprise platforms and more.
Watch the full episode here: lnkd.in/ePDYE3yh
#AI #AISecurity #Podcast #FireTail
Watch the full episode here: lnkd.in/ePDYE3yh
#AI #AISecurity #Podcast #FireTail
July 14, 2025 at 6:03 PM
In this special episode of hashtag#ModernCyber, join Jeremy at fwd:cloudsec Denver, as he chats with Veradigm cloud leaders Kyler Middleton and Sai Gunaranjan about securing AI in enterprise platforms and more.
Watch the full episode here: lnkd.in/ePDYE3yh
#AI #AISecurity #Podcast #FireTail
Watch the full episode here: lnkd.in/ePDYE3yh
#AI #AISecurity #Podcast #FireTail
Last year, our research team flew across the Atlantic to present multiple talks at fwd:cloudsec EU in Brussels, Belgium.
www.youtube.com/watch?v=f7Au...
www.youtube.com/watch?v=f7Au...
Hidden Among the Clouds: A Look at Undocumented AWS APIs ~ Nick Frichette
YouTube video by fwd:cloudsec
www.youtube.com
July 9, 2025 at 3:45 PM
Last year, our research team flew across the Atlantic to present multiple talks at fwd:cloudsec EU in Brussels, Belgium.
www.youtube.com/watch?v=f7Au...
www.youtube.com/watch?v=f7Au...
Mastering Cloud Security: Essential Commands and Techniques from fwd:cloudsec
Introduction: The fwd:cloudsec conference is a premier event showcasing cutting-edge cloud security research and practices. Curating its content effectively accelerates skill development for security professionals. Tools…
Introduction: The fwd:cloudsec conference is a premier event showcasing cutting-edge cloud security research and practices. Curating its content effectively accelerates skill development for security professionals. Tools…
Mastering Cloud Security: Essential Commands and Techniques from fwd:cloudsec
Introduction: The fwd:cloudsec conference is a premier event showcasing cutting-edge cloud security research and practices. Curating its content effectively accelerates skill development for security professionals. Tools like Lovable enable customized learning portals, such as the fwd:cloudsec 2025 video repository, enhancing accessibility to critical knowledge. Learning Objectives: Implement core cloud security hardening techniques for AWS/Azure/GCP Detect and mitigate common cloud misconfigurations using CLI tools…
undercodetesting.com
July 7, 2025 at 6:56 AM
Mastering Cloud Security: Essential Commands and Techniques from fwd:cloudsec
Introduction: The fwd:cloudsec conference is a premier event showcasing cutting-edge cloud security research and practices. Curating its content effectively accelerates skill development for security professionals. Tools…
Introduction: The fwd:cloudsec conference is a premier event showcasing cutting-edge cloud security research and practices. Curating its content effectively accelerates skill development for security professionals. Tools…
☁️ My fwd:cloudsec talk, "I SPy: Rethinking Entra ID research for new paths to Global Admin", is up! Learn what a service principal is, how Microsoft's first-party apps could be backdoored, and one weird trick they haven't fixed yet:
www.youtube.com/watch?v=oNpw...
www.youtube.com/watch?v=oNpw...
I SPy: Rethinking Entra ID research for new paths to Global Admin
YouTube video by fwd:cloudsec
www.youtube.com
July 3, 2025 at 1:20 PM
☁️ My fwd:cloudsec talk, "I SPy: Rethinking Entra ID research for new paths to Global Admin", is up! Learn what a service principal is, how Microsoft's first-party apps could be backdoored, and one weird trick they haven't fixed yet:
www.youtube.com/watch?v=oNpw...
www.youtube.com/watch?v=oNpw...
-ANSSI describes Houken (UNC5174) as APT IAB supplier
-Kimsuky adopts ClickFix, with a twist
-C4 Attack breaks Chrome's new encryption
-Wind FTP server RCE
-New Chrome zero-day
-IDE bugs show malicious extensions as verified
-leHACK and fwd:cloudsec videos
-LevelBlue buys Trustwave
-Kimsuky adopts ClickFix, with a twist
-C4 Attack breaks Chrome's new encryption
-Wind FTP server RCE
-New Chrome zero-day
-IDE bugs show malicious extensions as verified
-leHACK and fwd:cloudsec videos
-LevelBlue buys Trustwave
July 2, 2025 at 7:34 AM
-ANSSI describes Houken (UNC5174) as APT IAB supplier
-Kimsuky adopts ClickFix, with a twist
-C4 Attack breaks Chrome's new encryption
-Wind FTP server RCE
-New Chrome zero-day
-IDE bugs show malicious extensions as verified
-leHACK and fwd:cloudsec videos
-LevelBlue buys Trustwave
-Kimsuky adopts ClickFix, with a twist
-C4 Attack breaks Chrome's new encryption
-Wind FTP server RCE
-New Chrome zero-day
-IDE bugs show malicious extensions as verified
-leHACK and fwd:cloudsec videos
-LevelBlue buys Trustwave
If there is one major take away I have from fwd:cloudsec it’s this: cloud security teams are rapidly being asked to secure generative AI systems and workloads, but struggle with the lack of observability and understanding of the most prevalent attack vectors. There is work here.
July 1, 2025 at 6:24 PM
If there is one major take away I have from fwd:cloudsec it’s this: cloud security teams are rapidly being asked to secure generative AI systems and workloads, but struggle with the lack of observability and understanding of the most prevalent attack vectors. There is work here.
I'm at Fwd:CloudSec this week, so no new article this week - look out for that next week!
Instead, check out a write-up from Allen Helton on his Ready Set Cloud! newsletter :D Thanks Allen!
buff.ly/LQvhQsz
Instead, check out a write-up from Allen Helton on his Ready Set Cloud! newsletter :D Thanks Allen!
buff.ly/LQvhQsz
July 1, 2025 at 3:06 PM
I'm at Fwd:CloudSec this week, so no new article this week - look out for that next week!
Instead, check out a write-up from Allen Helton on his Ready Set Cloud! newsletter :D Thanks Allen!
buff.ly/LQvhQsz
Instead, check out a write-up from Allen Helton on his Ready Set Cloud! newsletter :D Thanks Allen!
buff.ly/LQvhQsz
Day 2 of fwd:cloudsec North America 2025 begins in half an hour! Catch the live-streams here:
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
Schedule: fwdcloudsec.org/conference/n...
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
Schedule: fwdcloudsec.org/conference/n...
fwd:cloudsec 2025 North America - Day 2, Breakout 1
Full schedule: https://fwdcloudsec.org/conference/north-america/schedule.html
www.youtube.com
July 1, 2025 at 2:29 PM
Day 2 of fwd:cloudsec North America 2025 begins in half an hour! Catch the live-streams here:
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
Schedule: fwdcloudsec.org/conference/n...
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
Schedule: fwdcloudsec.org/conference/n...
Live streams from the fwd:cloudsec 2025 security conference, which took place this week, are available on YouTube
www.youtube.com/playlist?lis...
www.youtube.com/playlist?lis...
fwd:cloudsec 2025 - YouTube
www.youtube.com
June 30, 2025 at 9:47 PM
Live streams from the fwd:cloudsec 2025 security conference, which took place this week, are available on YouTube
www.youtube.com/playlist?lis...
www.youtube.com/playlist?lis...
June 30, 2025 at 3:19 PM
Talks are starting in just under an hour for fwd:cloudsec North America 2025! Catch the live streams here:
- www.youtube.com/live/usWiIlV...
- www.youtube.com/live/cXBIp-f...
And day 2:
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
- www.youtube.com/live/usWiIlV...
- www.youtube.com/live/cXBIp-f...
And day 2:
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
fwd:cloudsec 2025 North America - Day 1, Breakout 1
YouTube video by fwd:cloudsec
www.youtube.com
June 30, 2025 at 2:24 PM
Talks are starting in just under an hour for fwd:cloudsec North America 2025! Catch the live streams here:
- www.youtube.com/live/usWiIlV...
- www.youtube.com/live/cXBIp-f...
And day 2:
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
- www.youtube.com/live/usWiIlV...
- www.youtube.com/live/cXBIp-f...
And day 2:
- www.youtube.com/live/si9qVVx...
- www.youtube.com/live/0BTBK33...
How to Leverage fwd:cloudsec for Cutting-Edge Cloud Security Insights
Introduction Cloud security is evolving rapidly, and staying updated with the latest research is critical for IT professionals. The fwd:cloudsec conference offers deep dives into offensive and defensive cloud security…
Introduction Cloud security is evolving rapidly, and staying updated with the latest research is critical for IT professionals. The fwd:cloudsec conference offers deep dives into offensive and defensive cloud security…
How to Leverage fwd:cloudsec for Cutting-Edge Cloud Security Insights
Introduction Cloud security is evolving rapidly, and staying updated with the latest research is critical for IT professionals. The fwd:cloudsec conference offers deep dives into offensive and defensive cloud security techniques. This guide will help you navigate the event’s resources and extract actionable knowledge. Learning Objectives Learn how to access fwd:cloudsec talks and optimize your viewing schedule. Discover key cloud security commands and tools discussed in the conference.
undercodetesting.com
June 30, 2025 at 10:31 AM
How to Leverage fwd:cloudsec for Cutting-Edge Cloud Security Insights
Introduction Cloud security is evolving rapidly, and staying updated with the latest research is critical for IT professionals. The fwd:cloudsec conference offers deep dives into offensive and defensive cloud security…
Introduction Cloud security is evolving rapidly, and staying updated with the latest research is critical for IT professionals. The fwd:cloudsec conference offers deep dives into offensive and defensive cloud security…
Cloud security teams: heading to Denver for fwd:cloudsec NA?
Make time for two sessions from Mitiga’s research team, each one focused on high-impact gaps most defenders overlook.
Add these sessions from Ariel Kalman and Gavriel Fried to your agenda: https://loom.ly/8ZMOjdY
Make time for two sessions from Mitiga’s research team, each one focused on high-impact gaps most defenders overlook.
Add these sessions from Ariel Kalman and Gavriel Fried to your agenda: https://loom.ly/8ZMOjdY
June 28, 2025 at 3:08 PM
Cloud security teams: heading to Denver for fwd:cloudsec NA?
Make time for two sessions from Mitiga’s research team, each one focused on high-impact gaps most defenders overlook.
Add these sessions from Ariel Kalman and Gavriel Fried to your agenda: https://loom.ly/8ZMOjdY
Make time for two sessions from Mitiga’s research team, each one focused on high-impact gaps most defenders overlook.
Add these sessions from Ariel Kalman and Gavriel Fried to your agenda: https://loom.ly/8ZMOjdY
fwd:cloudsec is around the corner! Don't miss these 3 talks from Datadog researchers Seth Sec, Katie Knowles, Greg Foss, and Anthony Randazzo.
fwdcloudsec.org/conference/n...
@sethsec.bsky.social
@siigil.bsky.social
@gregfoss.com
fwdcloudsec.org/conference/n...
@sethsec.bsky.social
@siigil.bsky.social
@gregfoss.com
June 27, 2025 at 9:02 PM
fwd:cloudsec is around the corner! Don't miss these 3 talks from Datadog researchers Seth Sec, Katie Knowles, Greg Foss, and Anthony Randazzo.
fwdcloudsec.org/conference/n...
@sethsec.bsky.social
@siigil.bsky.social
@gregfoss.com
fwdcloudsec.org/conference/n...
@sethsec.bsky.social
@siigil.bsky.social
@gregfoss.com
Folks coming to fwd:cloudsec, my face looks different: I have a beard. Come find me and let's chat about the new CTF I put together. lnkd.in/geRrC3aN
June 27, 2025 at 3:04 PM
Folks coming to fwd:cloudsec, my face looks different: I have a beard. Come find me and let's chat about the new CTF I put together. lnkd.in/geRrC3aN
Headed to fwd:cloudsec?
Join us at the Museum of Illusions - just 5 minutes from the venue!
🌮 Tacos
🍹 Margarita bar
🧠 Mind-bending illusions
RSVP -> lu.ma/m579b3wm
See you in Denver!
Join us at the Museum of Illusions - just 5 minutes from the venue!
🌮 Tacos
🍹 Margarita bar
🧠 Mind-bending illusions
RSVP -> lu.ma/m579b3wm
See you in Denver!
ClearVector @ fwd:cloudsec · Luma
Join us for an evening of food, drinks, illusions, and great company at the Museum of Illusions in Denver, after day one of fwd:cloudsec.
Enjoy interactive…
lu.ma
June 25, 2025 at 12:25 PM
Headed to fwd:cloudsec?
Join us at the Museum of Illusions - just 5 minutes from the venue!
🌮 Tacos
🍹 Margarita bar
🧠 Mind-bending illusions
RSVP -> lu.ma/m579b3wm
See you in Denver!
Join us at the Museum of Illusions - just 5 minutes from the venue!
🌮 Tacos
🍹 Margarita bar
🧠 Mind-bending illusions
RSVP -> lu.ma/m579b3wm
See you in Denver!