BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidescharm2026//speaker//HNWSNB
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsidescharm2026-TXW38X@pretalx.com
DTSTART;TZID=EST:20260425T150000
DTEND;TZID=EST:20260425T155000
DESCRIPTION:Cloud security shouldn’t feel like deciphering a spellbook wr
 itten during a power outage. This talk starts by breaking down the core co
 ncepts of cloud architecture and access control using clear\, memorable an
 alogies—yes\, “Pizza as a Service” makes an appearance. In just a fe
 w minutes\, the audience will understand how IAM\, org policies\, and serv
 ice boundaries compare to the on-prem world\, and how attackers use these 
 same models to find weak spots.\n\nThen it’s showtime. We dive into real
 -world cloud misconfigurations and the attack paths they create\, with a m
 ix of live demos (plus recorded backups\, because the demo gods can be fic
 kle) and open-source tools that anyone can use. We’ll walk through every
 thing from “accidental” data exposure to the infamous public GitHub to
 ken that launched hundreds of crypto-mining VMs without detection. And yes
 \, why cryptominers are often just the decoy for something far more concer
 ning.
DTSTAMP:20260417T061141Z
LOCATION:Track 1
SUMMARY:Cloud Misconfigurations: Oh look - Poke\, Poke\,\, Breach! - Kat Fi
 tzgerald
URL:https://pretalx.com/bsidescharm2026/talk/TXW38X/
END:VEVENT
END:VCALENDAR