Cloud security isn't just about keeping up with change, it's about being part of the conversation. We've asked our talented cloud security researchers at Wiz to share with us, and you, who they look up to in the industry.
Here's who they think you should follow to stay sharp this year:
Amitai Cohen, our Attack Vector Intel Lead, recommends Anna McAbee, a Senior Solutions Architect, Security at Amazon Web Services (AWS). Anna excels in articulating complex AWS Security concepts through her blog posts and whitepapers on incident response in the cloud, and her regular engagement with the cloud security community is awesome.
Leading Wiz's research on networks, Danielle Aminov endorses Clint Gibler. As the head of Security Research in Semgrep and the creator of the ‘tl;dr sec’ newsletter, Clint's original research and security insights provide pivotal contributions to the cloud security space.
If you're interested in AWS news and insights, Rotem Lipowitch's pick, Corey Quinn, is the person to follow. Creator of "Last Week in AWS", Corey provides a keen and analytical lens on AWS's developments. His engaging podcast and his commentary on AWS updates make him an invaluable resource.
As Wiz's Threat Detection Lead, Itamar Gilad endorses John Lambert, one of Microsoft's leading security gurus. Known for his innovative and influential threat-hunting work, John brings a blend of deep expertise, industry insights, and a forward-thinking approach. His contributions in cyber threat identification and risk mitigation make him a valuable addition to your following list. In addition to his substantial contributions to the cybersecurity world, John also shares captivating photos from his nature excursions. His love for nature gives a refreshing and human touch to his profile, reminding us that there's life beyond the cloud!
Shay Berkovich, our Kubernetes expert, suggests Kelsey Hightower — a well-known Kubernetes and Cloud pioneer and a co-founder of KubeCon. Kelsey describes themselves as a minimalist, advocating for the simplification of processes and removal of unnecessary complexities in cloud operations. A big part of their work nowadays revolves around increasing Kubernetes adoption by simplifying the Kubernetes processes and making it "approachable". Kelsey spoke at numerous conferences on Container and Kubernetes Security, Open-source and even published multiple books. Kelsey's tweets always get tons of attention, and it’s really easy to understand why.
Specializing in app & net security, Oren Ofer recommends following the Bishop Fox account. While Bishop Fox is an organization, its collective insights on app & net security, especially on innovative projects on Linux/container hacking, make it a must-follow. Bishop Fox's hands-on approach and practical demonstrations are a valuable resource for anyone working in the same space.
Our vulnerability intel researcher, Merav Bar, endorses Maddie Stone. Maddie’s comprehensive review of 0-days exploited in-the-wild in 2022, presented at Zer0Con 2023, offers deep insights into the latest in the field of cloud security. Her research approach and expertise are sure to enlighten your understanding of the industry.
Scott Piper, who helps customers secure their AWS environments, recommends following Ilya Epshteyn. Ilya works on the Identity team at AWS, and writes about how to use data perimeter concepts to create security guardrails for AWS environments. The data perimeter labs he built are a great resource for a better understanding of how IAM works in combination with resource and network capabilities.
Nir Ohfeld, the researcher behind the Big IAM Challenge and one of the researchers behind vulnerabilities such as ChaosDB and OMIGOD, recommends following Andy Nguyen. His expertise offers valuable insights and updates on container and Linux security, making him a must-read for those interested in staying updated in these areas.
Lior Sonntag, our lateral movement expert, endorses Karl Fosaaen. As VP of Research at NetSPI and an Azure Security expert, Karl delivers deep insights into Azure Security concepts, including exploiting misconfigurations, vulnerabilities and more. His posts and articles on Azure are valuable resources for an in-depth understanding of Azure security.
Sagi Tzadik, the researcher behind ChaosDB, recommends following Nick Frichette for his creative and insightful content on cloud security. Nick, with his practical, hands-on approach showcased in his creation 'Hacking the Cloud,’ an encyclopedia of tactics and techniques that offensive security professionals can use in cloud exploitation. His unique, hands-on approach to cloud security is not only enlightening but also incredibly valuable for professionals navigating the complexities of the field.
Hillai Ben Sasson, the researcher who discovered the #BingBang attack vector in Azure Active Directory (AAD) that affected Microsoft’s Bing.com, recommends James Kettle. James is a web security expert who specializes in innovative attack techniques such as Request Smuggling and Cache Poisoning. He posts interesting research pieces in the field, as well as useful research tools and Burp extensions. He also posts educational content such as tutorials and demo labs that can be helpful for beginners.
Avigayil Mechtinger, a cloud threat detection expert, highly recommends Chris Doman. Chris's tweets are a rich source of information on cloud forensics, a discipline that covers the collection, analysis, and interpretation of evidence found in the cloud to investigate incident response. His expertise in different aspects of cloud threats, coupled with his timely sharing of knowledge, makes him a must-follow for anyone wanting to stay on top of the latest trends in cloud forensics.
Barak Sharoni, our GenAI and attack vectors researchers, recommends Mark Ermolov, a researcher from PT Security. Mark has been publishing insightful and forward-thinking content about the Intel CPU, including management engine (ME) and microcode vulnerabilities, offering valuable insights for hardware security researchers. Throughout the years, he successfully established his personal brand as a pioneer in the intel realm of research.
Shir Tamari, the Head of Research at Wiz, recommends Aidan W Steele. Aidan has been a pioneering voice in the cloud-native security space for over five years, consistently proposing new approaches and solutions to complex security problems. His consistent delivery of quality content and innovative thought leadership sets him apart in the industry.
Alon Schindel, our Director of Data & Threat Research, recommends Scott Piper, a cloud security historian known for his obsession with examining the geologic records of AWS SDK commits. In addition to this, Scott is a Threat Researcher at Wiz. He has developed tools such as flaws.cloud, CloudMapper, and Parliament. Furthermore, he is a founding member of the annual fwd:cloudsec conference.
In cloud security, it's all about staying in the loop. By following these experts, you're taking an important step to stay up-to-date, understand industry trends, and keep your organization safe. So grab a coffee, open up Twitter, and start exploring what these incredible thought leaders have to share. Happy learning!
To recap, here's our list of top cloud security voices you should follow in 2023:
P.S. Got any recommendations of your own? We’d love to hear from you! Let us know by tagging us on Twitter: @wiz_io
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。