Cloud Security Podcast
Cloud Incident Response in Microsoft Azure
Feb 20, 2025
In this engaging discussion, security researcher Katie Knowles, a former Azure incident responder, dives into critical Azure security topics. She unpacks common incident response scenarios and the rising threat of LLM jacking, where attackers misuse authentication tokens. Katie shares insights on privilege escalation in Azure Key Vault and emphasizes the importance of secure role assignments. She also offers practical tips for developing an effective Azure incident response playbook, making Azure's intricate security landscape accessible to all.
54:15
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Understanding LLM jacking is crucial, as it represents a significant risk by exploiting authentication tokens to hijack computing resources in cloud environments.
- Incident response within Azure requires tailored strategies, emphasizing the creation of a robust incident response plan informed by real-world examples.
Deep dives
Understanding LLM Jacking and Resource Theft
LLM jacking is emerging as a significant risk in cloud environments, highlighting another form of resource theft. This technique exploits authentication tokens and API access to hijack useful compute power from legitimate users. Attackers leverage these tokens to route queries through large infrastructures for malicious purposes, effectively creating a backend pool of AI resources for their needs. As this trend continues, it becomes crucial for organizations to learn about these vulnerabilities and implement safeguards against unauthorized access.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
