Name: How A Loophole Could Allow Attackers to Penetrate Thousands of GKE Clusters
Start: 2024-01-26T19:00:00Z
End: 2024-01-26T19:00:32.000Z
Location: BrightTALK
Rating: 4.2

Orca Security is the industry-leading Cloud Security Platform that identifies, prioritizes, and remediates security risks and compliance issues across your cloud estate spanning AWS, Azure, Google Cloud and Kubernetes.

Retailers are racing to meet evolving customer expectations by using cloud services to drive innovation, streamline operations, enhance customer experiences, and stay ahead of the competition. As retailers move to the cloud, they also become more attractive targets for bad actors seeking to exploit vulnerabilities, making robust security measures essential to protect operations and customer data. Join Orca Security, Google Cloud, and ESG to gain a better understanding of how retail organizations can effectively secure their cloud applications to protect their business and customer data.

Key Takeaways:
- How retail organizations can effectively secure their cloud applications
- How to gain full visibility, mitigate risk and achieve compliance with a cloud-native security solution 
- How to leverage cloud services to support business growth

Speaker Bios:
- Toby is an Advisor in Google Cloud’s Office of the CISO. As a Security Advisor, Toby works with the largest and most innovative companies on the planet, helping to develop security strategies. Prior to Google, Toby worked at Microsoft where he spent five years bringing industry solutions to Azure cloud. He is guided by a simple maxim: Build systems like you won’t be there to support them; build relationships like you will.
- As Orca's Field CTO, Neil helps organizations identify and contain security risks in their cloud estates. His passion for getting ahead of security problems comes from over a decade of leading customer-facing security incident response teams at Microsoft and seeing what happens when attackers win. Neil also helped build the future of cloud-native security at Twistlock, StackRox, and Torq before joining Orca. Neil is also an avid NYC-based street photographer.
- ESG Security Practice Director Melinda Marks covers technologies that help organizations scale safely while adopting faster cloud-native development cycles.

Navigating Cloud Security Challenges in the Retail Industry with Orca Security, Google Cloud, and ESG

As organizations increase their AI investments, AI security is often overlooked, leading to risks like exposed access keys, overly permissive identities, and misconfigurations that can undermine initiatives. Join our expert panel, moderated by Neil Carpenter, for a focused discussion on AI security in cloud computing, featuring insights from Orca’s 2024 State of AI Security Report. 

The session will cover:

● OWASP’s role in AI security and the Machine Learning Security Top Ten project.
● Key findings from Orca’s report and actionable strategies for your security framework.
● An introduction to AI Goat, the first open-source hands-on environment for AI security training.

Top AI Risks of 2024 in Cloud Services: An Expert Deep Dive

As the healthcare industry moves more data and applications to the cloud, security teams will (naturally) worry about the implications for privacy, compliance, and security. Join AWS and Orca Security for an open discussion of how diligent security teams are forging better security outcomes in the cloud.  We'll discuss how to address the unique concerns of hospitals, providers, and medical technology companies with a focus on prioritizing and addressing prominent risks.

Learn more: 
https://orca.security/solutions/industries/industry-healthcare/
https://orca.security/partners/technology/amazon-web-services-aws/

Mitigating Risks in Healthcare Cloud Environments: Insights from Orca and AWS

In the ever-evolving landscape of cloud security, identifying and mitigating risks is crucial for maintaining the integrity of your cloud environment. We invite you to join industry veterans from Orca Security and Aqua Security, who collectively bring over 40 years of experience in cybersecurity, for an insightful and educational session designed to enhance your understanding of container security and incident response in the cloud.  

Scenario: 
You’ve experienced an actual attack and now need to find the root cause and remediate it. Without runtime controls, your forensic investigations and attack path analysis can feel like chasing ghosts. This webinar will provide you with a comprehensive framework to achieve swift remediation and maintain robust cloud security. 

Key Takeaways: 
● Understanding Attack Paths: Learn how to identify and analyze attack paths within your cloud environment. 
● Framework for Remediation: Discover a structured approach to quickly and effectively remediate security incidents 
● Real-World Demo: Witness a live demo showcasing instant response and investigation techniques in the cloud

Navigating Attack Paths in the Cloud: A Framework for Swift Remediation

AI is revolutionizing industries, and cloud security is no different. Generative AI can significantly accelerate, simplify and improve an organization’s security posture. But what about the security risks in AI models? In this session, we will explore how GenAI is reducing Enterprise IT workloads and enhancing cloud security, while also introducing new risks. Join AI experts at Orca Security to learn about the five most common AI model risks, including data leakage and tampering, and how to prevent them.

Learn more about Orca's GenAI capabilities: https://orca.security/platform/ai-cloud-security/
Learn more about Orca's AI Security (AI-SPM) capabilities: https://orca.security/platform/ai-security-posture-management/

Accelerate Cloud Security with AI and Reduce AI Risk

AI is revolutionizing industries, and cloud security is no different. Generative AI can significantly accelerate, simplify and improve an organization’s security posture. But what about the security risks in AI models? In this session, we will explore how GenAI is reducing Enterprise IT workloads and enhancing cloud security, while also introducing new risks. Join AI experts at Orca Security to learn about the five most common AI model risks, including data leakage and tampering, and how to prevent them.

Many organizations have embraced the need to detect source code risks early in the software development lifecycle (SDLC). Despite investing in supply chain security, they often overlook the significant security risks if their source code management (SCM) platforms are not properly configured. Our expert speakers will discuss the challenges of misconfigurations in two of the most popular SCM platforms—GitHub and GitLab—and how to manage your SCM posture without hindering innovation. 

In this webinar you will learn:
● The popularity and benefits of SCM platforms 
● The top risks associated with SCM platforms
● Challenges involved in addressing these risks
● How Source Code Management Posture Management (SCM-PM) works

How to Secure GitHub and GitLab: SCM Posture Management (SCM-PM) Explained

In this webinar, our panelists will discuss how generative AI and large language models can
help strengthen cloud security in a way that previously wasn’t possible. Orca has partnered with
AWS to integrate their Amazon Bedrock AI service into the Orca Cloud Security Platform to automatically
generate remediation steps and code, dramatically reducing MTTR (Mean Time to Resolution). Join us to delve deeper into how generative AI is helping reduce workloads and accelerating outcomes in the field of cloud security, as well as how to manage your AI security posture.

In this webinar we will discuss:
● How Orca integrated Amazon Bedrock to automatically generate remediation steps and
code.
● AI is empowering security teams to respond to and remediate issues faster than ever
before
● Practical use cases where AI is already helping to improve cloud security
●  How organizations can keep their AI models secure

Enhancing Cloud Security with Generative AI - Orca Security and AWS

As the adoption of AI models explodes, it’s important that security is not overlooked. Since AI models often include sensitive data and intellectual property in their training data, these cloud resources are at an even greater potential risk than other resources. Our expert speakers will discuss the specific challenges of AI security and how to manage your AI security posture without hindering innovation.

In this webinar you will learn:

- How widespread AI development is right now
- What AI risks are most pressing now
- What challenges are involved in addressing these risks
- How AI Security Posture Management works

AI Security Posture Management Explained

Join our expert Chief Information Security Officers (CISOs) as they delve into the key findings from Orca Security's 2024 State of Cloud Security Report, compiled by the Orca Research Pod by analyzing billions of cloud assets in real-world environments.

Moderated by Andy Ellis, our panelists will explore:
- The most impactful statistics highlighted in the report
- How the report findings compare to their real-world experiences
- The biggest cloud security challenges facing security leaders in 2024
- How to enhance cloud security, even when resources are constrained

Bios:
Yoav Alon is a security veteran with 12+ years of experience, and is recognized on Microsoft Security Response Center’s Most Valuable Research List (BlackHat 2019). Prior to joining Orca Security, he was a researcher and team leader at Unit 8200 (the Israeli NSA), a chief architect at Hyperwise Security, and a security architect at Check Point Software Technologies. Yoav holds a BSc in Computer Science from the Open University of Israel. In his spare time, Yoav enjoys hunting for vulnerabilities. Yoav can be found on LinkedIn & Twitter.

Dave Lewis has 30 years of experience in IT security operations and management. Dave has held senior security roles at Akamai, IBM, Duo Security, Cisco and AMD. He founded the security site Liquidmatrix Security Digest and is currently a member of the board of directors for BSides Las Vegas. Previously, he served on the board of directors for (ISC)2, and was a founder of BSides Toronto conference. Dave was a DEFCON speaker operations goon for 13 years, and serves on the advisory board for the Black Hat Sector Security Conference and the CFP review board for 44CON. Dave has written for Forbes, CSO Online, Huffington Post, The Daily Swig, and more. For fun, he is a curator of small mammals (his kids) plays bass guitar, grills, and is part owner of a whisky distillery as well as a soccer team. You can find him on LinkedIn.

CISO Fireside Chat: 2024 State of Cloud Security Report

In this webinar we will learn about the vulnerability recently discovered by Hunters’ Team Axon called DeleFriend - what it is, how it is exploited, and what you can do to protect yourself from it. More than just a series of slides we’ll have the threat researchers demonstrate the vulnerability and breach a demo environment.  We shall see that Google Workspace depends on Google Cloud Platform and why you need to rigorously protect yourself across both. We’ll discuss attacks on Google Cloud Platform and Google Workspace as well as a live demo of the exploit. 

Key takeaways:
- How GCP and Google Workspace are interconnected
- How to detect and prevent this demonstrated attack
- What you need to do to protect yourself from this exploitable vulnerability

Exploring a Severe Design Weakness in Google Workspace - Hunters & Orca Security

In this webinar, our panelists will discuss how AI and large language models such as ChatGPT and Azure OpenAI can contribute to cloud security in a way that previously wasn’t possible. While AI isn’t new, organizations are increasingly applying AI to solve complex issues that are hard to replicate by humans. This is resulting in reduced daily workloads for security practitioners and DevOps teams, as well as more robust cloud security postures.

In this webinar we will discuss:
- How AI is empowering security teams to respond to and remediate issues faster than ever before
- Practical use cases where AI is already helping to improve cloud security
- New AI applications that we can expect in the future

Learn more: https://orca.security/platform/ai-cloud-security/

Unleashing the Power of Generative AI: Accelerating Cloud Security

We'll discuss the benefits of cloud security democratization and how generative AI and large language models such as ChatGPT and Azure OpenAI are contributing to this important initiative. By making cloud security accessible to not only security teams, but also developers, DevOps and governance and risk teams, organizations can empower stakeholders to make security-driven decisions, leading to reduced friction and improved cloud security postures. 

You'll learn:
  •  Why cloud security democratization is important
  •  How AI-driven cloud security empowers stakeholders across the organization
  •  Practical use cases where AI is helping improve cloud security postures

We’ll also demo how the Orca platform democratizes cloud security by delivering intuitive, AI-driven cloud asset search, remediation and user permissions management.

Democratizing Cloud Security with GenAI

Have a cloud security question? Our monthly Orca LIVE: Ask the Experts sessions are available to answer your toughest questions, get expert takes on hot topics, and expand your cloud security network. In this session, Advanced Cloud Security Tactics Manager Roi Nisimi joins Neil Carpenter and Ashley Ward to discuss a new vulnerability his team discovered, specifically, how unauthenticated access to GCP Dataproc can lead to a data leak. 

Register for the next live session here: https://try.orca.security/ask-the-experts.html?utm_source=brighttalk&utm_medium=webinar&utm_campaign=23-q4-cloud-security-live-experts-dec-wbr

Orca LIVE: Ask the Experts - GCP Dataproc Vulnerability

Do security concerns and mountains of alerts keep your team up at night? Learn how your security organization can more efficiently identify, prioritize, and remediate cloud security risks and maintain compliance with Orca Security and Amazon Web Services (AWS). 

Learn more at: https://orca.security/

Secure your Cloud Environment and Achieve Compliance

A loophole in Google Kubernetes Engine (GKE) - dubbed ‘Sys:All’ - could allow an attacker with any Google account to take over a GKE cluster, potentially leading to serious security incidents such as cryptomining, denial of service, and sensitive data theft. The loophole stems from a likely widespread misconception that the system:authenticated group in GKE includes only verified and deterministic identities, whereas in fact, it includes any Google authenticated account (even outside the organization). This misunderstanding could then create a serious weakness when the system:authenticated group is assigned overly permissive roles.

Learn from our speakers as they deep-dive into the details of the GKE loophole, provide the results of our initial reconnaissance research in the wild, and provide practical recommendations on how to make sure your organization is not vulnerable.

In this webcast, we’ll cover:
- What the ‘Sys:All’ GKE loophole is
- How we managed to find thousands of vulnerable GKE clusters
- How to protect against this loophole

Learn more: 
https://orca.security/resources/blog/sys-all-google-kubernetes-engine-risk-example/
https://orca.security/resources/research-pod/sys-all-google-kubernetes-engine-risk/

Get a Demo of the Orca Security Platforn: https://orca.security/demo/

How A Loophole Could Allow Attackers to Penetrate Thousands of GKE Clusters

Cloud Security

Threat Detection

Cyber Defence

Cyber Attacks

Kubernetes

Threat Defence

Cyber Security

Security

Secure Cloud

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How A Loophole Could Allow Attackers to Penetrate Thousands of GKE Clusters

Presented by

About this talk

More from this channel