Meetup: DevOps DC

Webinar-Addressing Cloud Security with Open Policy Agent (OPA)

Checking infrastructure as code such as Terraform, for security and compliance before infrastructure deployment is becoming a critical part of the DecSecOps toolkit. OPA is an open source policy as code framework, commonly used to validate Kubernetes and public cloud compliance. checklists.

In this webinar, Dave Williams (Cloud Architect at New Light Technologies), Carl Alleyne (Senior DevSecOps Engineer at New Light Technologies)  and Josh Stella (cofounder and CTO at Fugue) will show how cloud engineers can leverage OPA and other open source tools for cloud security and compliance. 

Developer Week

Josh Stella, Fugue Founder and CTO will present-Hacking the Cloud: Simulating Advanced Cloud Misconfiguration Exploits

Josh will walk through a live demonstration of how hackers take advantage of common⁠ but overlooked cloud misconfigurations to gain access to environments, jump from account to account, discover resources to target, and exfil sensitive data.
This session will be performed live in the terminal and the AWS console, and will cover advanced topics that primarily focus on AWS IAM (Identity and Access Management) service misconfigurations. While focused on AWS, the concepts are readily applicable to other cloud platforms such as Microsoft Azure and Google Cloud Platform.
At each step of the way, he’ll talk in detail about why these misconfigurations happen in every day cloud operations, how they’re taking advantage of them, and how these attacks can be prevented.

Meetup: AWS Bay Area 

Josh Stella, Co-Founder and CTO will present:  A Live Demo of a Cloud Misconfiguration Breach

MEETUP: AWS Chicago User Group

Fugue is pleased to sponsor the AWS Chicago Meetup.  Grab some pizza  as you learn more about Fugue. 

DevOps Days Charlotte

Josh Stella, CTO of Fugue, will walk through a live demonstration of how hackers take advantage of common⁠ but overlooked AWS IAM misconfigurations to gain access to environments, jump from account to account, discover resources to target, and exfiltrate sensitive data.

This session will be performed live in the terminal and the AWS console, and will cover advanced topics that primarily focus on AWS IAM (Identity and Access Management) service misconfigurations. While focused on AWS, the concepts are readily applicable to other cloud platforms such as Microsoft Azure and Google Cloud Platform.

At each step of the way, Josh will talk in detail about why these misconfigurations happen in every day cloud operations and how these attacks can be prevented. 

Angel Beat Conference Boston

Angelbeat is for IT professionals involved with cloud, applications, security and data.

Josh Stella will speak about Understanding Cloud-Native Exploits and How Engineers Can Prevent
Them.

The cloud has changed the way malicious hackers think and operate, and we need to change how we keep cloud-based data secure. Josh Stella, co-founder and CTO of Fugue, will walk through how cloud misconfigurations provide bad actors with the ability to access environments, discover sensitive data, and steal it⁠—all without detection. Finally, Josh will explore open source policy-as-code tools that can empower cloud engineering teams to find and prevent these misconfiguration vulnerabilities and keep data secure.

Angel Beat Conference New York City

Angelbeat is for IT professionals involved with cloud, applications, security and data.

Fugue Co-Founder andCTO, Josh Stella will speak on Understanding Cloud Native Exploits and How Engineers Can Prevent Them.

The cloud has changed the way malicious hackers think and operate, and we need to change how we keep cloud-based data secure. Josh will walk through how cloud misconfigurations provide bad actors with the ability to access environments, discover sensitive data, and steal it⁠—all without detection. Finally, he will explore open source policy-as-code tools that can empower cloud engineering teams to find and prevent these misconfiguration vulnerabilities and keep data secure.

InfoSec World-Cloud Security Summit

Join Josh Stella Co-Founder and CTO and Wayne Crissman, Director of Security, as they discuss how traditional security approaches and solutions can’t prevent misconfiguration or detect associated data breaches; because cloud misconfiguration is a software engineering problem, not a security analysis problem. That’s good news, because with the right cloud security architecture, we can address cloud misconfiguration before hackers can find and exploit them.

The demonstration will utilize a running AWS cloud environment, but the concepts and misconfiguration risks are applicable to any cloud provider, including Microsoft Azure and Google Cloud Platform. You will see:

• Common, and dangerous, cloud misconfigurations and how hackers exploit them
• How to evaluate your cloud environment to identify misconfiguration vulnerabilities
• Strategies for eliminating misconfigurations without disrupting applications
• Tips on educating developers and cloud engineers on secure cloud architecture
• Building better collaboration and trust between security and application teams

AWS Summit San Francisco

Join Fugue at AWS Summit San Francisco and learn how the cloud is accelerating innovation in Businesses of all sizes. Learn how Fugue can help you gain visibility, eliminate misconfiguration and integrate security in your cloud environment.

O'Reilly Software Architecture Conference

Josh Stella, Fugue Founder and CTO will present-Securing Your Cloud Environment with Architecture Best Practices

Josh will run a live simulation of  advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data.  

At each step, Josh will share alternative approaches to architecting cloud infrastructure services to ensure our applications run efficiently while denying bad actors the tools and means to exploit them. Attendees will leave with actionable insights to evaluate their own cloud environment for misconfiguration vulnerabilities, how to address them, and how to bake secure cloud architecture approaches into software development. 

O'Reilly Infrastructure and Operations  Conference

Josh Stella, Fugue Co-Founder and CTO will present Simulating Cloud-Native Exploits Live: To Understand and Prevent Them

In this talk, Josh will run a live simulation of an advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data. Many of the misconfigurations exploited won’t be flagged by compliance scans and often aren’t considered risky by security teams.

At each step, he will share alternative approaches to architecting cloud infrastructure services to ensure our applications run efficiently while denying bad actors the tools and means to exploit them. Attendees will leave with actionable insights to evaluate their own cloud environment for misconfiguration vulnerabilities, how to address them, and how to bake secure cloud architecture approaches into software development.

AGC Partners Information Security Conference

Josh Stella, Fugue Co-Founder and CTO will be speaking on the Cloud/CSPM Panel