Cloud As An Attack Vector | Rushikesh Vishwakarma & Ashwin Vamshi | NULLCON Goa 2020

This talk examines the exponential growth of cloud technology and its implications for security. The speakers, Rushikesh Vishwakarma and Ashwin, both Security Researchers at Netskope, discuss how enterprises utilize the cloud for storing and sharing critical data, while also highlighting the increased risk from cybercriminals exploiting cloud services as a platform for attacks. They reference a Netskope report indicating that enterprises use over a thousand cloud services, both sanctioned and unsanctioned, and discuss Gartner's prediction regarding the prevalence of attacks in shadow IT resources. The session delves into how malware not only leverages cloud services for attack delivery but also for hosting Command and Control servers, revealing the cloud's potential as a significant attack vector.