The speaker argues that AI will accelerate security operations and attacker workflows. He describes potential AI-assisted SOC triage and phishing, while emphasizing that defenders need strong technical judgment to assess AI-generated results.
A tutorial demonstrates just-in-time access requests and approvals for AWS Systems Manager-managed servers, along with session logging and RDP recording. It also covers approval policies and permissions that prevent bypassing the access process.
A video walkthrough demonstrates AWS Security Agent in public preview, showing automated penetration testing, vulnerability verification, code review, and design review, with findings and reproducible test steps.
The video demonstrates Kali Linux workflows for network discovery, SMB/FTP access, password guessing and cracking, phishing-style credential capture, web scanning, OSINT, remote shells, and SQL injection testing. The presenter says exercises use systems he owns.
The video walks through OSINT searches using Google operators, username and reverse-image lookup, and resources such as Migrat and the Google Hacking Database. It also demonstrates finding exposed passwords and hash matches, highlighting account-takeover risks.
A tutorial of AWS Security Hub’s general-availability release covers how it aggregates security findings, correlates exposures, and supports vulnerability and posture management, account coverage, dashboards, automation, integrations, and cross-region aggregation.
The speaker predicts that AI agents will automate cyberattacks, malware may adapt to evade detection, and deepfakes will fuel scams. They urge defenders to learn how to build and deploy AI agents.
A hands-on tutorial builds and deploys a Bedrock AgentCore agent to analyze AWS WAF logs in CloudWatch Logs, summarize suspicious requests, and provide security insights. It also demonstrates correcting the agent role’s log-read permissions.
A walkthrough configures Amazon Q Developer with an MCP server and AWS credentials to query CloudTrail. An initial search returns no events; a later query finds activity characterized as legitimate administrative tasks.
Loi Liang Yang argues that AI agents could automate security-log triage, identity-permission reviews and other workflows, urging cybersecurity professionals to retain core skills while learning to operationalize agents.
A tutorial demonstrates using Amazon Q Developer to query AWS WAF logs for SQL injection and cross-site scripting requests, then create an IP set and add a blocking rule. The presenter shows commands for review and execution.
A tutorial outlines seven API security practices: authentication, authorization, rate limiting, input validation, monitoring, replay-attack protection, and API discovery to identify unprotected endpoints.
A lab walkthrough injects JavaScript into a chat app to hook and control a browser session, then demonstrates fake login prompts that capture entered credentials.
The tutorial demonstrates Amazon Inspector’s vulnerability management across Lambda, EC2, container images and code repositories, showing how to prioritize findings, inspect vulnerable code and packages, remediate issues, and search for CVEs.
The tutorial configures Gophish to send a phishing simulation, use a cloned Gmail login page, and record link clicks and credentials entered by a test recipient.
The video demonstrates setting up PowerShell Empire, creating an HTTP listener and Windows batch stager, gaining an agent after execution, browsing and downloading a file, and using modules presented for privilege escalation, credential dumping and ransomware.
A video demonstrates connecting a Flipper Zero to a phone by USB and using its Bad USB module to run a script that automatically types text and opens a YouTube channel.
The tutorial shows how to configure IAM Access Analyzer for internal access and identify principals with permissions to selected AWS resources, including an S3 bucket. The demo highlights how findings can reveal broad access.
A tutorial demonstrates connecting Amazon Inspector to a GitHub repository to scan code for issues such as SQL injection and sensitive information exposure, with findings and recommendations appearing after code changes are pushed.
A walkthrough shows AWS Security Hub correlating security findings into potential attack paths, including a vulnerable EC2 instance with excessive IAM permissions, and illustrates how to investigate and remediate the exposure.
A hands-on walkthrough shows how to configure AWS WAF protection packs, tune rate limits and managed rules, inspect traffic in logs, and test recommendations by blocking a request disguised as Googlebot.
The tutorial uses ADB shell access and JADX to inspect a deliberately insecure Android banking app, showing how a Base64-encoded username and AES-CBC-encrypted password can be recovered from app preferences when the key and IV are exposed.
The tutorial configures Burp Suite to intercept a demo banking app’s traffic, then modifies a password-change request to bypass the app’s complexity check and change the password for another username.
The presenter demonstrates how an attacker with compromised or overly permissive AWS credentials could encrypt and overwrite S3 objects using a customer-provided key, then shows CloudTrail/Athena detection and an RCP prevention control.
