Cloudy with a chance of vulnerabilities: finding & exploiting vulnerabilities in cloud

The Wiz Research team has uncovered serious security issues (ChaosDB, OMIGOD, AWS confused deputy vulnerabilities, ExtraReplica and more) across many attack vectors and CSPs during their research efforts. Join them to learn about the methodologies they used to successfully uncover those critical vulnerabilities. They will dive into the bits and bytes of some of their major findings, explain their mindset and approach and discuss common pitfalls to avoid.