Security Bsides Las Vegas 2024

Adi is an experienced security manager, used to leading teams to protect some of the most sensitive systems around. While her background was originally as a software developer and manager, she was most recently Vice President of Cybersecurity at JPMorgan Chase & Co., one of the largest banks in the world. Adi is now serving as Director IT & Security of Mitiga.
Ms. Belinkov has well over a decade of experience in management roles, with security, operations, and development teams. She works closely with developers, QA engineers, Devops, and Product managers to deeply embed security into their daily workflows, often delivering internal training sessions. Adi has a pragmatic understanding of organizational constraints and requirements, and leverages these to ensure we deliver the optimal results to stakeholders.
Adi has served in the famous 8200 unit in the IDF, has a degree in Software Engineering, and Executive MBA. She also volunteers for SheCodes, and previously ran one of the chapters.


Session

08-06
11:30
20min
Adversaries Also Lift & Shift: Cloud Threats Through the Eyes of an Adversary
Sherman, Adi

In this talk, we delve into the evolving landscape of cybersecurity threats in cloud environments, showcasing how adversaries are shifting tactics from traditional breaches to sophisticated cloud-specific attacks. No longer merely "breaking in," attackers are now "logging in," leveraging the cloud's unique vulnerabilities and features to their advantage. We explore the sophisticated tools and strategies these adversaries employ, from exploiting misconfigurations and weak access management to manipulating cloud-native functionalities. This presentation highlights the critical shift in attacker techniques and the imperative for defenders to adopt cloud-native security strategies. Through real-world case studies and analysis of successful breaches, attendees will gain invaluable insights into the attackers' mindset and the evolving attack vectors effective in cloud scenarios. This talk aims to equip cybersecurity professionals with the knowledge to anticipate, identify, and defend against these advanced tactics, promoting a proactive and resilient defense posture against the ever-changing threat landscape in cloud environments.

Ground Floor
Florentine E