RSA Conference 2025

San Francisco, CAApril 29, 20252 talks

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts

Imagine taking over an entire AWS account with just an account ID. This session will reveal attack vectors that led to the discovery of multiple critical vulnerabilities in AWS, exposing paths to remote code execution, account takeovers, and data leaks. Attendees will learn how issues were uncovered, how to detect them in their own environments, and actionable steps to enhance cloud security.

Video

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts - Image 1

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts - Image 2

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts - Image 3

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts - Image 4

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts - Image 5

RSA Conference 2025
Speakers: Assaf Morag, Yakir Kadkoda

Cracks in the Fortress: How Major Companies Leak Their Secrets

Know everything there is to know about secrets scanning? Attendees in this session will find out how many secrets they may be unknowingly exposing to attackers. Learn how research uncovered overlooked secrets in the software development lifecycle and hear captivating stories about findings. This session will discuss lessons we learned, and teach how to better protect the organization's secrets.

Video

RSA Conference 2025
Speakers: Assaf Morag, Yakir Kadkoda