BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: From Pipeline to Cloud Control\n   Tags: Cloud Villa
 ge | Creator Talk/Panel\n   When: Friday\, Aug 7\, 11:30 - 12:10 PDT\n   W
 here: LVCCW Level 3 W313 (Cloud Village Talks) - [1]Map\n\n   Description:
 \n\n   Azure DevOps service connections are a core part of modern pipeline
 s\,\n   allowing teams to interact with Azure and other external systems\n
    seamlessly. While they make deployments faster and easier\, they also\n
    introduce an attack surface that is often overlooked in real-world\n   
 environments.\n\n   In this research\, we explore new attack paths showing
  how even limited\n   access within Azure DevOps pipelines can be leverage
 d to escalate\n   privileges and compromise cloud environments. By taking 
 advantage of\n   over-scoped service connections and certain platform beha
 viors\, an\n   attacker can chain together small gaps to achieve significa
 nt impact\,\n   including gaining subscription-level access.\n\n   These f
 indings were reported to Microsoft and acknowledged through\n   MSRC\, hig
 hlighting a deeper issue in how DevOps integrations are\n   secured. Rathe
 r than being just a configuration problem\, this reflects\n   a broader ga
 p that organizations need to understand when designing\n   their cloud sec
 urity approach.\n\n   SpeakerBio:  Saksham Agrawal\n\n   Saksham Agrawal i
 s a Senior Security Consultant at NotSoSecure\,\n   specializing in cloud 
 security. His work focuses on discovering new\n   attack paths in cloud en
 vironments and helping organizations\n   understand real-world risks. He h
 as presented his research at DEF CON\n   Cloud Village\, where he introduc
 ed his tool NoPrompt and shared\n   practical techniques for cloud securit
 y testing. He enjoys building\n   tools\, exploring cloud internals\, and 
 sharing his findings with the\n   security community. He has also responsi
 bly reported critical\n   vulnerabilities in major cloud vendors as part o
 f his independent\n   security research and actively delivers training ses
 sions on cloud\n   security and offensive security techniques.\n\n   '\n\n
    1. #LVCCW_Level3_South\n\n\n
DTEND:20260807T191000Z
DTSTART:20260807T183000Z
LOCATION:Cloud Village - LVCCW Level 3 W313 (Cloud Village Talks)
SUMMARY:From Pipeline to Cloud Control
END:VEVENT
END:VCALENDAR