woodspeed (@wucpi) header
woodspeed (@wucpi) profile picture

2019 Jenkins Security MVP | CAWASP, CARTP, CRT, OSCP, eWPT, eWPTX, eMAPT | Views and opinions are my own.

Joined July 2011
Photo by woodspeed (@wucpi)Photo by woodspeed (@wucpi)Photo by woodspeed (@wucpi)Photo by woodspeed (@wucpi)
It is a great honor and I'm very happy to get the 2019 Jenkins Security MVP award! Thank you very much! Special thanks for Daniel Beck! #jenkins #JenkinsWorld @jenkinsci @devopsworldconf @kohsukekawa @CloudBees @NCCGroupInfosec @NCCsecurityUS @NCCGroupplc
2
12
3
29
🌩 Couldn’t make it to @cloudvillage_dc @defcon 33 Day 3? Now you can watch it all online! 🎥 The final day’s talks are live on our YouTube channel packed with insights, demos & stories from the cloud security community ☁️ 👉 Watch now: youtube.com/playlist?list=PL… #defcon33 #defcon #cloudvillage #infosec #cybersecurity #cloudsecurity
1
3
8
1,062
🎥 Missed the action at @cloudvillage_dc during @defcon ? We’ve got you covered! All Day 1 talks are now live on our YouTube channel 📺 Catch up on the insights, hacks, and cloud security deep dives you might’ve missed! 👉 Watch now: youtube.com/playlist?list=PL… #defcon33 #defcon #cloudvillage #infosec #cybersecurity #cloudsecurity
1
6
8
1,321
Shoutout to our amazing Day 2 speakers who brought serious energy and insights to Cloud Village Labs @defcon 33 ⚙️☁️ Catch their sessions below and show them some love 👇 @madhuakula @wucpi Shani Peled Ryan O'Donnell Gowthamaraj Rajendran @nevadaromsdahl @0xZDH @HawkEyeDev Muhammad Yuga Nugraha @kidtronnix Hanna Papirna Emma Fang @sethsec @4p0hk
1
1
322
🎤 On Stage at @cloudvillage_dc | @defcon @wucpi - Exploring The Possibilities of Azure Fabric Abuses Deep dive into hidden attack paths inside Azure Fabric services. #CloudVillage #HackerSummerCamp #DC33 #DEFCON
2
2
306
🎤 Up next in 15 minutes – 10:30 AM PDT at @cloudvillage_dc @defcon @wucpi - Exploring The Possibilities of Azure Fabric Abuses #CloudVillage #HackerSummerCamp #DC33 #DEFCON
1
2
260
🧠 Let’s talk Azure internals — and how to bend them to your will. Pumped to welcome @wucpi to Cloud Village @DEFCON 33! He’s presenting: “Exploring The Possibilities of Azure Fabric Abuses” 🔧 📍 Room 311, LVCC 🗓️ Aug 9 | 🕥 10:30–11:10 AM PT 🔗 cloud-village.org/dc33 #CloudVillage #DEFCON33 #HackerSummerCamp
4
10
1,559
The Cloud Village @defcon 33 schedule is LIVE! ☁ Explore a stacked lineup of comprehensive talks, lightning talks, and tool demos; all focused on real-world cloud security. Line Up: cloud-village.org/dc33#sched… #CloudVillage #DC33 #DEFCON33 #HackerSummerCamp
1
11
2
26
4,594
New video: 1 hour of Conditional Access design deep dive. I always get asked to share Conditional Access templates, so I roped @NateHutch365 into the first of a few long forms on thinking about robust, scalable, and customizable CA architecture. Watch: youtube.com/watch?v=NSqfUZM7…
2
45
3
213
11,476
📢ANNOUNCEMENT📢⏳2 months to go! BSidesBUD of @SecurityBSides brings top-tier cybersecurity minds to the stage—don’t miss out! 🔥 🎟 Early bird tickets are still up for grabs! Secure your spot! bsidesbud.com #BSidesBUD2025 #Cybersec #Infosec #securityBSides
3
1
5
452
Replying to @wucpi
@wucpi's talk on "Creating Azure Policy Compliant Backdoor" is now released on YouTube! youtu.be/gdMx3g62NkE Subscribe and stay tuned for more videos! Happy Hacking. #CloudSecurity #DefCon32
2
1
150
woodspeed retweeted
In Part 1 of my Intune Attack Paths series, I discuss the fundamental components and mechanics of Intune that lead to the emergence of attack paths: posts.specterops.io/intune-a…
2
51
2
123
7,738
I looked at all the AWS OIDC integrations I could find to identify how they might be misconfigured and to understand the variations that different vendors have in how they set these up. wiz.io/blog/avoiding-mistake…
1
26
2
97
8,212
woodspeed retweeted
Time for a Friday read! 📖 Miss that #DefCamp vibe? Want to relive the best moments? We've got you covered with some epic highlights to take you right back. Dive in and enjoy 👉 def.camp/defcamp-2024-highli…
2
2
127
One recent report highlighted that roughly a third of their customers have “at least one cloud workload that is publicly exposed, critically vulnerable and highly privileged.” If you’re this vendor, should I really buy your product? ramimac.me/state-of-cloud-se…
1
1
8
477
woodspeed retweeted
Replying to @DrAzureAD
@DrAzureAD is showcasing token based authentication attacks, breaking down what to steal from the user's endpoint.
2
4
1,011
Day #2 at @DefCampRO, waiting for the first track #1 talk of the day to begin!
1
1
6
1,120
Backdooring #Azure policies by Viktor Gazdag at @DefCampRO
1
2
14
1,474
woodspeed retweeted
Imagine turning a cloud security tool into a weapon—Viktor Gazdag is currently revealing how Azure Policy, which organizations typically use to enforce compliance, can be twisted to create backdoors in cloud environments.
2
2
286