Speaker: Lucie Cardiet 

In this session, Lucie Cardiet breaks down how modern attackers move across identity, network, cloud, and endpoint controls without triggering obvious alarms. From exposed buckets and stolen credentials to token abuse and AI-assisted lateral movement, each step often looks legitimate in isolation. Using real-world breach examples and attacker chat logs, this talk walks through how adversaries exploit gaps between tools, persist even after eviction, and compress their timelines with automation and AI.