Identity Attack Surface and Cloud Security | 14min snip from Smashing Security

Get the app

Think before you shrink! And our guest is faked

Smashing Security

chevron_right

notes

CHAPTER

Identity Attack Surface and Cloud Security

This chapter explores the concept of identity attack surface in cloud applications, highlighting the shift from perimeter-based testing to targeting endpoints and identities. It discusses the challenges of securing user accounts in the cloud, including password-based attacks and phishing techniques. The chapter emphasizes the importance of strong authentication methods and constant monitoring to prevent unauthorized access and data breaches.

00:00

Transcript

chevron_right

Play full episode

chevron_right

Transcript

Episode notes

Don't minimise your Teams Meeting video call too hastily, you might reveal your dirty secrets! Would you be prepared to pay for Facebook and Instagram? And who is being faked to promote cryptocurrency scams?

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Jane Wakefield.

Plus - don't miss our featured interview with Push Security founder and CEO Adam Bateman.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

XtraVue Trailer demo - YouTube.
Nvidia sued after video call mistake showed 'stolen' data - BBC News.
Valeo v. Nvidia complaint - DocumentCloud.
Fake BBC news article using Jane Wakefield’s name - Twitter.
Report a fraudulent webpage to Google Safe Browsing - Google.
Meta's EU ad-free subscription faces early privacy challenge - Yahoo!
Meta to offer ad-free subscription in Europe in bid to keep tracking other users - TechCrunch.
Meta’s EU ad-free subscription faces early privacy challenge - TechCrunch.
Facebook and Instagram to Offer Subscription for No Ads in Europe - Facebook.
noyb files GDPR complaint against Meta over “Pay or Okay” - NOYB.
Big Mac index 2023 - Statista.
Euro aea wages 2023 - Take-profit.org.
Boat Story review - The Guardian.
GlasgowGPT - the world's first Scottish artificial intelligence chatbot.
Gergely Orosz uncovers fake female speakers at a tech conference - Twitter.
Eliza-May Austin shares her experiences of being invited to speak at tech conferences - LinkedIn.
Boat Story - BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Push Security - Monitor and secure your entire identity attack surface, including non-SSO identities. Get notified in real-time to vulnerabilities across all your internet-facing identities, and have your staff guided to fix simple issues.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:

OP3 - https://op3.dev/privacy

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.

Home Top podcasts Popular guests