Speaker: Tobias Wicke 

These days, it’s impossible to imagine a world without the cloud and hyperscalers. But as the “cloud-first” approach continues to gain ground, the attack surface is changing as well. What used to be the perimeter is now an API. In this presentation, Tobias Wicke of NSIDE ATTACK LOGIC GmbH will demonstrate how attackers strategically navigate between the areas of responsibility of different teams to achieve their goals undetected. In this scenario, a modern tech stack is targeted: GitHub, AWS, and Kubernetes. The attacker’s goal is simple: to gain access to the database containing customer data in order to demand a ransom. However, traditional malware is no longer needed for this type of attack, and endpoint protection solutions such as EDRs are ineffect ...