Watch and track your favorite playlist.
Curated by: pouria (9 videos)
A story about an insider threat: the head of cloud and infrastructure downloads 150 private GitHub repositories and a 250 GB production database snapshot from his own company, then holds them for ransom. Permanent AWS access keys stored in GitHub, an admin role that breaks the principle of least privilege, a bot user's SSH key, CloudTrail logs deleted with a lifecycle policy and no SIEM. Names and events fictionalized Chapters 0:00 The weekly sync-up 1:54 Ransomware at Baypoint Medical 2:56 The hacker 4:14 Infrastructure as code 6:12 Stealing the AWS access keys 7:01 The night of the attack 9:02 CloudTrail and the lifecycle policy 10:37 The ransom email 12:20 The deadline tajpouria.dev@gmail.com https://github.com/sponsors/tajpouria #insiderthreat #cybersecurity #cloudsecurity #aws #devsecops