Under Siege: How Hackers Exploit Cloud Vulnerabilities

Published: Oct. 15, 2024, 5:30 p.m.

Hello to all our Cyber Ghosts! Join host Selena Larson\xa0 as she chats with Eilon Bendet\u2013 Cloud Threat Researcher from Proofpoint. \u200b\u200bFrom account takeovers to state-sponsored hacks, they uncover how cybercriminals are outsmarting traditional defenses \u2013 and why even multi-factor authentication might not be enough to keep them out.\xa0

Together, they discuss the complexities of cloud threat detection, including the role of User and Entity Behavior Analytics (UEBA) in identifying suspicious activities and preventing account takeovers (ATO). Eilon breaks down two primary ATO threat vectors\u2014credential-based brute force attacks and precision-targeted phishing campaigns.\xa0

Also discussed:

  • how these groups exploit cloud environments
  • concerning trends such as the rise of reverse proxy-based toolkits and MFA bypass techniques
  • the importance of identity-focused defense strategies and how threat actors customize tools to infiltrate cloud systems, steal data, and monetize compromised accounts

Resources mentioned:
MACT or malicious applications blog: https://www.proofpoint.com/us/blog/cloud-security/revisiting-mact-malicious-applications-credible-cloud-tenants

For more information about Proofpoint, check out our website.

Subscribe & Follow:
Don't miss out on future episodes\u2014subscribe to the Discarded Podcast on your favorite platform.