BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Misconfigurations in the Cloud: Poke\, poke\, Breach
 !\n   Tags: Cloud Village | Creator Talk/Panel\n   When: Saturday\, Aug 8\
 , 17:00 - 17:40 PDT\n   Where: LVCCW Level 3 W313 (Cloud Village Talks) - 
 [1]Map\n\n   Description:\n\n   Cloud security has become very good at fin
 ding problems after they\n   ship. Scanners run. Dashboards glow. Tickets 
 multiply. Meanwhile\,\n   attackers stroll in through configurations that 
 technically\n   “passed” review. In 2026\, misconfigurations still und
 erstand how\n   to ruin everyone’s day\, not because teams don’t care\
 , but because\n   cloud complexity has officially outrun human attention.\
 n\n   This session opens with the 2026 hierarchy of cloud misconfiguration
 s\,\n   grounded in late-2025 and early-2026 breach data rather than folkl
 ore:\n\n     * Identity and entitlement overreach as the new breach starte
 r\n       pistol\n\n     * SaaS and API integrations quietly bypassing MFA
 \, logging\, and\n       common sense\n\n     * Storage exposure that surv
 ived provider guardrails via\n       authenticated access and CDNs\n\n    
  * Shadow environments and abandoned IaC resources that never got the\n   
     security memo\n\n   From there\, I stop poking the fluffy cloud creatu
 re and wondering why\n   it bites back. Using the Guardrail Strategy and P
 olicy as Code\,\n   security rules become executable laws of physics insid
 e CI/CD\n   pipelines. Public buckets fail builds. Admin-level service acc
 ounts\n   get denied. Secrets never make it into source control. Productio
 n\n   click-ops quietly undo themselves like a bad idea sobering up.\n\n  
  I’ll then introduce the Toxic Trilogy: cloud assets that are\n   public
 ly exposed\, highly privileged\, and critically vulnerable.\n   PaC’s re
 al power in 2026 is context. By evaluating how these risks\n   overlap\, p
 olicies don’t just find problems\, they prevent entire\n   breach classe
 s from ever existing.\n\n   The result is faster delivery\, fewer incident
 s\, and security that\n   finally keeps up with cloud speed without becomi
 ng the team everyone\n   avoids on Slack.\n\n   Key Takeaways\n\n     * Id
 entify the top cloud misconfiguration patterns of 2026 based on\n       re
 al breach data\n\n     * Understand why identity and API integrations now 
 outrank storage\n       as breach drivers\n\n     * Recognize the Toxic Tr
 ilogy and why its overlap predicts breaches\n       with scary accuracy\n\
 n     * Explain how Policy as Code shifts security from detection to\n    
    prevention\n\n     * Apply a policy-first workflow to block risky cloud
  deployments\n       before production\n\n     * Reduce misconfiguration r
 isk without slowing developers or\n       drowning in tickets\n\n   Speake
 rBio:  Kat Fitzgerald\n\n   Porto-based and powered by chaos\, I split my 
 time between Portugal\,\n   Chicago\, and wherever the next conference or 
 suspicious packet capture\n   happens to be. Equal parts cybersecurity arc
 hitect\, honeypot wrangler\,\n   and frequent flyer with a questionable re
 lationship to gravity\, I run\n   a growing Honeypot Empire designed to an
 noy attackers around the\n   globe!!\n\n   When not speaking at security c
 onferences or building deceptive little\n   digital trapdoors for internet
  goblins\, I can usually be found hopping\n   continents\, mentoring folks
  in cybersecurity\, sipping dangerously good\n   tequila\, or voluntarily 
 jumping out of perfectly functional airplanes.\n   Sasha the Dancing Flami
 ngo still supervises operations with chaotic\n   authority and absolutely 
 believes she deserves root access.\n\n   '\n\n   1. #LVCCW_Level3_South\n\
 n\n
DTEND:20260809T004000Z
DTSTART:20260809Z
LOCATION:Cloud Village - LVCCW Level 3 W313 (Cloud Village Talks)
SUMMARY:Misconfigurations in the Cloud: Poke\, poke\, Breach!
END:VEVENT
END:VCALENDAR