Recorded at fwd:cloudsec Europe 2026 September 7 and 8 London, UK

This post will explore what this new concept does, how it works with the new Account Access capability, and why a strong security posture still requires upgrading out of the sandbox.

S3 compatible services carry many of the same concerns as the original S3 service. This article highlights which assumptions break and what risks remain.

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

YouTube video by Wiz

Discussion of PQC relevant statistics that we see across our customers and other data sources.

Forrest Brazael, a former Google employee, chronicles the fall and rise of a time-travel startup in his forthcoming book, ‘Paradox Inc.’

fwd:cloudsec 2026 Get different formats: curl https://pretalx.com/fwd-cloudsec-2026/schedule/\?format=table (default) curl https://pretalx.com/fwd-cloudsec-2026/schedule/\?format=list ...

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

This post will look at the past 20 years of cloud security research, separating the two decades into eras with important milestones defined that resulted in the change of one era to the next.

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

fwd:cloudsec is the industry's leading independent, community-driven cloud security conference. All times listed are in US/Pacific time.

How Anthropic's refusal test string can be abused to stop streaming responses and create sticky failures.

Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.

AWS European Sovereign Cloud is now generally available, offering EU-based organizations independent cloud infrastructure with enhanced sovereignty controls, E...

Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.

Amazon GuardDuty and our automated security monitoring systems identified an ongoing cryptocurrency (crypto) mining campaign beginning on November 2, 2025. The operation uses compromised AWS Identity ...

The re:Invent announcements that are most impactful to security teams.

There's no silver bullet, but if we put some "lead" bullets in the right places, we have a good shot at keeping sensitive data out of logs.

Join our monthly cloud security CTF challenge, built by top Wiz researchers. Solve real-world scenarios and rise to the top of the leaderboard.

Detect and mitigate malicious npm packages linked to the recent Shai-Hulud-style campaign. Over 25,000 affected repositories across ~350 unique users.

Introducing Skyway: contract management for enterprise cloud spend. Built by the team overseeing tens-of-billions in enterprise cloud spend.

Raccoons are both advanced and persistent threats. After one attacked my chihuahua Jolene, I declared war on my backyard invaders. Through ultrasonic deterrents, motion-activated sprinklers, and wacky...

Jeep just pushed a software update that bricked all the 2024 Wrangler 4xe models, including my Willys. The future is going great.

: Software maker Kodex said its domain registrar fell for a fraudulent legal order

Cloudflare is making every feature available to any customer.

Discover more about what's new at AWS with AWS announces EC2 instance attestation

Describes the SOAP API with respect to service, bucket, and object operations that you can perform on the Amazon S3 web service.

Discover more about what's new at AWS with Billing View now supports cost management data from multiple organizations

Join our monthly cloud security CTF challenge, built by top Wiz researchers. Solve real-world scenarios and rise to the top of the leaderboard.

It's just normal crime

GitHub is strengthening npm's security with stricter authentication, granular tokens, and enhanced trusted publishing.

Full schedule: https://fwdcloudsec.org/conference/north-america/schedule.htmlJoin the conversation on Slack: https://fwdcloudsec.org/forum/

YouTube video by fwd:cloudsec

Learn why the use of canary tokens let us spot a recent intrusion and swarm quickly in response, and find out why you should be using canary tokens to prevent serious security incidents in the future.

Discover how attackers could quietly enumerate AWS resources via Resource Explorer, and how Datadog and AWS worked together to close the visibility gap.