Resource Center

Thinking Like a Hacker

In this Cloud Security Masterclass Josh Stella helps you get into the mindset of an attacker probing your cloud environment. You’ll learn how to spot previously-missed vulnerabilities and determine the blast radius of your cloud security gaps.

Thinking Like a Hacker Part II: Real-World Exploits in Action

In Part 2, Josh simulates two real-world cloud misconfiguration attacks to demonstrate in real-time how these methods work in evading datacenter security approaches and take advantage of common cloud misconfigurations that compliance standards miss.

Avoiding a Cloud Security Collision with Policy-Based Automation

In this session, Charlene O'Hanlon (Media Ops) brings together Josh Stella (CEO, Fugue) and Matt Howard (EVP, Sonatype) to explore the inevitable convergence of development, ops, and security, and why this represents the first-ever opportunity to align all cloud stakeholders with policy automation up and down the stack — and left and right across the SDLC.

Minimizing the Blast Radius of a Cloud Breach

In this Cloud Security Masterclass, Josh Stella, Co-Founder and CEO, will walk through a process for understanding the blast radius of a variety of potential security events in your environment, and steps you can take to prevent minor ones from becoming catastrophic breaches.

How Hackers Exploit Dev and Test Environments

Join us as Josh Stella shows how hackers exploit common dev and test cloud environment vulnerabilities to steal production data.

Building a Highly Secure S3 Bucket Part I

In this masterclass, you'll gain a deeper understanding of S3 and how to think critically about cloud security for your specific use cases.

Building a Highly Secure S3 Bucket Part II

In this Cloud Security Masterclass, Fugue digs deeper into three critical components of S3 security to help you think critically about security for your unique AWS use cases.

Locking Down the Security of AWS IAM

Recent high-profile cloud-based data breaches have involved advanced cloud misconfiguration attacks exploit IAM misconfigurations that compliance controls and security professionals often miss.

Locking Down the Security of AWS IAM Part II

In this masterclass, Fugue CTO Josh Stella digs into AWS IAM to help you think more critically about security for your AWS use cases. You’ll understand how to identify AWS IAM misconfiguration vulnerabilities you’ve missed before—and the risks they pose.

Simulating Cloud Misconfiguration Attacks: AWS IAM

AWS Identity and Access Management (IAM) misconfiguration has become a primary attack vector for bad actors seeking to breach data on AWS. Even the most security-conscious cloud engineers can inadvertently misconfigure IAM services resulting in privilege escalation attacks or unauthorized account access.

Live Simulation of an Advanced Cloud Misconfiguration Exploit

Recent high-profile cloud breaches involve advanced tactics that took advantage of multiple resource misconfigurations to gain entry to environments, discover resources, move laterally, and extract data—all without detection. They don’t typically break compliance rules, and security teams won’t likely recognize them as vulnerabilities.

Live Simulation of Cloud Misconfiguration Attacks

Advanced attacks that exploit a common cloud misconfiguration vulnerabilities with VPCs, IAM, and other services are easily missed by security teams and compliance frameworks.

Cloud Misconfiguration Risk: What You Need to Know to Prevent Critical Breaches

Watch this webinar to gain a better understanding of cloud infrastructure misconfiguration, a major risk to any enterprise adopting the cloud and scaling cloud operations.

Simulating Misconfiguration Attacks: S3 Exploits

Amazon S3 object storage service is easy to use, extremely reliable, and incredibly popular, but it’s also a service that’s easy to get wrong.