Webinar-Cloud Security for Newly Distributed Engineering Teams

Transitioning to a distributed team environment introduces new cloud security risks that need to be addressed to avoid incidents and maintain compliance.  In this webinar, the Fugue Team will be joined by Dave Williams, Cloud Architect at New Light Technologies, to walk through practical steps engineering teams should take to avoid the security and compliance pitfalls with newly distributed cloud operations.  Specifically they'll cover:

• Visibility over security groups, IAM users and other cloud infrastructure changes
• adjusting processed to keep cloud infrastructure and data secure
• Tips on maintaining team sanity when everyone is working from home

BsidesCharm

Josh Stella, Fugue Co-Founder and CTO will be presenting: Hacking the Cloud: Simulating Advanced Cloud Misconfiguration Exploits.  

Preventing cloud-native exploits requires us to re-think cloud architecture and how we use services such as IAM. Josh will simulate advanced cloud attacks live, to demonstrate how common cloud misconfigurations are exploited to understand how we can prevent them, up front with secure architecture.

AWS Cloud Security Meetup DC

Josh will walk through a live demonstration of how hackers take advantage of common⁠ but overlooked cloud misconfigurations to gain access to environments, jump from account to account, discover resources to target, and exfil sensitive data.
This session will be performed live in the terminal and the AWS console, and will cover advanced topics that primarily focus on AWS IAM (Identity and Access Management) service misconfigurations. While focused on AWS, the concepts are readily applicable to other cloud platforms such as Microsoft Azure and Google Cloud Platform.

DevOps Days Baltimore

Josh Stella, Fugue's Co-Founder and CTO will be discussing: How Not to Get Hacked: Securing your Cloud Environment with Architectural and DevOps Best Practices 

Josh will run a live simulation of advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data.

Meetup: AWS Bay Area 

Josh Stella, Co-Founder and CTO will present:  A Live Demo of a Cloud Misconfiguration Breach

Cloud misconfiguration is now the leading cause of cloud-based data breaches, typically due to a lack of secure cloud architecture practices. Because cloud infrastructure is 100% software, cloud security is a software engineering problem, not a traditional security analysis problem. In order to prevent data breaches in the cloud, we must address it with secure software architecture right from the start.

AWS Cloud Security Meetup DC

Fugue is proud to sponsor this meetup.  Please join Fugue at the meetup for great food, Fugue swag and networking!

AWS Cloud Security Meetup DC

Fugue Co-Founder and CTO will present- Addressing Cloud Security with Open Policy Agent (OPA)

O'Reilly Software Architecture Conference

Josh Stella, Fugue Founder and CTO will present-Securing Your Cloud Environment with Architecture Best Practices

Josh will run a live simulation of  advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data.  

At each step, Josh will share alternative approaches to architecting cloud infrastructure services to ensure our applications run efficiently while denying bad actors the tools and means to exploit them. Attendees will leave with actionable insights to evaluate their own cloud environment for misconfiguration vulnerabilities, how to address them, and how to bake secure cloud architecture approaches into software development. 

O'Reilly Infrastructure and Operations  Conference

Josh Stella, Fugue Co-Founder and CTO will present Simulating Cloud-Native Exploits Live: To Understand and Prevent Them

In this talk, Josh will run a live simulation of an advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data. Many of the misconfigurations exploited won’t be flagged by compliance scans and often aren’t considered risky by security teams.

At each step, he will share alternative approaches to architecting cloud infrastructure services to ensure our applications run efficiently while denying bad actors the tools and means to exploit them. Attendees will leave with actionable insights to evaluate their own cloud environment for misconfiguration vulnerabilities, how to address them, and how to bake secure cloud architecture approaches into software development.

InfoSec World-Cloud Security Summit

Join Josh Stella Co-Founder and CTO  as he discusses how traditional security approaches and solutions can’t prevent misconfiguration or detect associated data breaches; because cloud misconfiguration is a software engineering problem, not a security analysis problem. That’s good news, because with the right cloud security architecture, we can address cloud misconfiguration before hackers can find and exploit them.

The demonstration will utilize a running AWS cloud environment, but the concepts and misconfiguration risks are applicable to any cloud provider, including Microsoft Azure and Google Cloud Platform.

O'Reilly Open Source Software Conference

Josh Stella, Fugue CO-Founder and CTO will be presenting: Using Open Policy Agent for Cloud Infrastructure Security

The open source Open Policy Agent (OPA) is an ideal framework for cloud infrastructure secuirty.  This talk will walk through using OPA and the Rego language for cloud infrastructure policy-as-code, to eliminate manual processes and inject security into every phase of the software development lifecycle, including infrastructure as code pre-deployment checks.

Interop

We are excited to have Josh Stella, CTO and Co-Founder, speaking at Interop 2020 this year in Austin. Josh will be presenting: Simulating Real Time Cloud Misconfiguration Attacks to Improve Cloud Security

Developer Week Cloud Edition-Seattle

Josh Stella Fugue Co-Founder and CTO will present: A Live Simulation of Cloud Misconfiguration Attacks

Josh will run a live simulation of an advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data. Many of the misconfigurations exploited won’t be flagged by compliance scans and often aren’t considered risky by security teams.