CodeShield

This has to be our most underrated course. I launched the "IAM Privilege Escalation Labs" course last December when everyone was already checked out for the holidays, so it didn't get the attention it deserved. It's unfortunate, because it's one of our most fun and engaging courses (in my opinion, but also check our the testimonials below!) and it teaches practical skills that everyone administering AWS permissions should have. The course is 100% made up of 🧪 Hands-On Labs (a few of which are even free!) and the walkthroughs are completely free as well, you don't even need to register to view them. It's a lot of value that many of you are passing by 😉 I'll let the testimonials speak: “I thoroughly enjoyed every aspect of this course. The content was engaging and well-structured, and I particularly appreciated the approach it took. Both challenges provided were not only interesting but also highly stimulating. I would strongly recommend this course to anyone interested in #AWS #Pentesting.” – REVANTH S (Security Engineer II) “This course not only taught me how to think like an attacker, but also how easy it is to escalate privileges if excessive #IAM permissions are present in the cloud. I honestly loved it and recommend it 100%!” – Mariana Arce Aguilar (Cybersecurity Engineer) ➡️➡️ Check out the course: https://lnkd.in/gRkwzfi7 ➡️➡️ We also have an upcoming free live training session titled "AWS Privilege Escalation Attacks & Defenses" with Manuel Benz. Grab your spot now: https://lnkd.in/g7vSkQTB

🔒 Excited to Share Insights on AWS IAM Privilege Escalation Attacks & Defenses! 🔒 https://lnkd.in/di-rknFD What if I told you that hackers can easily get admin rights to your cloud infrastructure? Most people are not aware of the risks of IAM Privilege Escalations and how easily attackers can move in their cloud environment. On the 6th of March, join me, along with Christophe Limpalair, for a deep dive into AWS IAM Privilege Escalation Attacks & Defenses. It's such a crucial topic that, when overlooked, it can inadvertently grant 3rd party integrations, attackers, and even your developers admin privileges and, surprisingly, many individuals and managers aren't fully aware of its implications. In this webinar, we'll uncover real-world examples and demonstrate how threat actors exploit misconfigurations in IAM, as well as discuss strategies to prevent and defend against these threats. Plus, I'll be showcasing a live demo of how to tackle these with CodeShield. 📅 Save the Date: Wednesday, March 6th, 2024 🕘 09:00 AM MST / 11:00 AM EST / 05:00 PM CET Registration Link: https://lnkd.in/di-rknFD Register now to ensure you're equipped with the knowledge to safeguard your AWS infrastructure effectively! #AWS #Security #Webinar #privilegeescalation

🔒 Excited to Share Insights on AWS IAM Privilege Escalation Attacks & Defenses! 🔒 https://lnkd.in/di-rknFD What if I told you that hackers can easily get admin rights to your cloud infrastructure? Most people are not aware of the risks of IAM Privilege Escalations and how easily attackers can move in their cloud environment. On the 6th of March, join me, along with Christophe Limpalair, for a deep dive into AWS IAM Privilege Escalation Attacks & Defenses. It's such a crucial topic that, when overlooked, it can inadvertently grant 3rd party integrations, attackers, and even your developers admin privileges and, surprisingly, many individuals and managers aren't fully aware of its implications. In this webinar, we'll uncover real-world examples and demonstrate how threat actors exploit misconfigurations in IAM, as well as discuss strategies to prevent and defend against these threats. Plus, I'll be showcasing a live demo of how to tackle these with CodeShield. 📅 Save the Date: Wednesday, March 6th, 2024 🕘 09:00 AM MST / 11:00 AM EST / 05:00 PM CET Registration Link: https://lnkd.in/di-rknFD Register now to ensure you're equipped with the knowledge to safeguard your AWS infrastructure effectively! #AWS #Security #Webinar #privilegeescalation

Techies aufgepasst! Mein letztes Investment ist Deep-Tech pur! 🤖     Darf ich vorstellen: CodeShield – IAM Security in der Public Cloud. Das Problem: Das Rechtemanagement in der Cloud bei Amazon Web Services, Microsoft Azure und Google Cloud Plattform ist extrem komplex und fehleranfällig.  Das macht die Umsetzung sehr zeitaufwendig und führt zu Sicherheitslücken, und damit leider immer wieder zu erfolgreichen Cyber-Angriffen und Datenverlust. Wisst Ihr, wie viele Softwareentwickler*innen im Unternehmen Eure gesamte Infrastruktur löschen können? Nein? Dann könnt (und solltet) ihr es mit CodeShield herausfinden. Der komplette Datenverlust durch Hackerangriffe oder Mitarbeitende wird meist verschwiegen. Einer der ersten Cloud-Angriffe geschah 2014 und führte zur sofortigen Geschäftseinstellung von Code Spaces. Warum? Alle ihre Daten und Backups wurden in der AWS Cloud gelöscht. Also, zurück zu CodeShield: Es handelt sich um ein B2B SaaS, das in nur 30 Minuten die wahrscheinlichsten Angriffsszenarien auf die Cloud berechnet und automatisch Vorschläge zur Behebung der Schwachstellen unterbreitet. Ein beliebter Angriffsvektor sind Drittanbieter. Immer wieder findet CodeShield, dass Drittanbieterlösungen, obwohl sie sehr restriktive Berechtigungen in der Cloud haben sollten, tatsächlich Administratorenrechte hat. Ein sehr hohes Sicherheitsrisiko für jedes Unternehmen, da alle Mitarbeitenden mit der Berechtigung die Möglichkeit haben, den Account und alle Daten zu löschen. Aktuell zählen zu CodeShield Kunden Firmen wie die Northmill Bank aus Schweden, Tempest Security, ein MSSP aus Brasilien und Syracom, ein deutsches Beratungsunternehmen. Das Gründerteam besteht aus Manuel Benz und Johannes Noll. ☁️ Ihr nutzt die AWS Cloud? Meldet Euch für einen kostenlosen Check bei CodeShield! ✉️ Oder falls ihr eventuell Interesse an einem Investment habt, schreibt eine DM an Johannes Noll. #awscloud #awssecurity #cybersecurity #investment