Tyrone Erasmus
I have hacked some things, written some things and built some things. Google if interested.
Session
Scattered Spider kids figured it out. The bears and pandas figured it out. Your red team still dropping Cobalt Strike like it’s 2015?
Modern attackers aren't wasting time on your hardened endpoints anymore - they're walking straight into your cloud. Not AWS, the other cloud: the thousand SaaS apps your company married, divorced, but somehow still pays for.
Hold my beer as we speedrun the entire kill chain - initial access, persistence, lateral movement - across your favorite SaaS platforms. No zero-days. No malware. No "please disable your AV for this demo." No alerts, No logs.
Bring popcorn. Bring questions. Maybe bring your pearls, so you can clutch them.
