Cloud Security Podcast

Once Route 53 records are orphaned, someone can capture your domain’s name servers. Tokens sent to callback URLs on its subdomains then go to them, and the whole hosted zone is compromised.

Ramesh Ramani from Block on @CloudSecPod.

Two people with a GPU rig can point it at an environment, and no one is writing signatures or detections for this. What used to be sophisticated is now commoditised, so your skill set matters that much more.

Damien Lewke, @nebulocksec on @CloudSecPod.

A production app in another account may still be using a subdomain under an orphaned hosted zone. When the person who created the records has left, they belong to no one.

Ramesh Ramani from Block on @CloudSecPod

A threat model for a complex application has gone from a multi-week or multi-month project to hours, in roughly six to nine months.

Ben Oster, @ThreatModeler on @CloudSecPod.

A pen test agent verified domain ownership against a private IP, then tested the public site once the DNS record was repointed.

Richard Fan on @CloudSecPod about the guardrails he got past in AWS Security Agent. #CloudSecurity