Friday 7 June 2024, 11am-12noon (BST)

It’s being said that identities are the new digital perimeter, as work moves away from traditional networks with unprecedented adoption of cloud services and software-as-a-service (SaaS).

Attackers are turning their attention to this new landscape, which means we need to re-think what we know about how attacks unfold, and how to stop them.

Luke presented his research on the SaaS attack matrix, a repository collection of SaaS-specific attack techniques (which you can find on GitHub) designed for security researchers, red/blue teams, and penetration testers, allowing them to learn about and share SaaS attack techniques.

As well as presenting research, Luke highlighted the use cases for some of the most impactful and prevalent techniques (many of which we now see in the wild) and demonstrated how they could be chained together in ‘networkless’ attacks that don’t touch company endpoints.

Guest chaired by

Simon Mair (info), Chief Information Security Officer, National Bank of Kuwait

Presented by

Luke Jennings (info), VP R&D, Push Security