BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: New AWS IAM Attack Paths and the Framework to Exploi
 t Them\n   Tags: Cloud Village | Creator Talk/Panel\n   When: Friday\, Aug
  7\, 10:10 - 10:50 PDT\n   Where: LVCCW Level 3 W313 (Cloud Village Talks)
  - [1]Map\n\n   Description:\n\n   In cloud environments\, the path from l
 ow-privilege foothold to full\n   account takeover often runs through IAM 
 privilege escalation. This\n   talk introduces over a dozen newly discover
 ed escalation paths\n   spanning services that have never appeared in publ
 ic research: AWS\n   Batch\, Amazon Braket\, Amazon Managed Apache Flink\,
  Amazon GameLift\,\n   Health Omics\, and more.\n\n   We'll walk through e
 xploiting the most interesting paths in depth\,\n   including cross-accoun
 t variants and attacks that require delivering\n   malicious code payloads
  to trigger escalation. Then we'll introduce\n   Pathrunner\, a new open-s
 ource Metasploit-style framework built\n   specifically for IAM privilege 
 escalation\, and show how it makes\n   chaining these complex\, multi-hop 
 attacks practical during a real\n   engagement.\n\n   SpeakerBio:  Seth Ar
 t\n\n   Seth Art is a Security Researcher & Advocate at Datadog. Prior to\
 n   joining Datadog\, Seth created and led the Cloud Penetration Testing\n
    practice at Bishop Fox. He is the author of pathfinding.cloud\, an AWS\
 n   IAM privilege escalation library\, and has published many open source\
 n   tools including Pathfinding-labs\, IAMVulnerable\, BadPods\, and\n   C
 loudFoxable\, and is the co-creator of the popular cloud penetration\n   t
 esting tool\, CloudFox.\n\n   '\n\n   1. #LVCCW_Level3_South\n\n\n
DTEND:20260807T175000Z
DTSTART:20260807T171000Z
LOCATION:Cloud Village - LVCCW Level 3 W313 (Cloud Village Talks)
SUMMARY:New AWS IAM Attack Paths and the Framework to Exploit Them
END:VEVENT
END:VCALENDAR