EP177 Cloud Incident Confessions: Top 5 Mistakes Leading to Breaches from Mandiant

Topics covered:

• Most organizations you see use both cloud and on-premise environments. What are the most common challenges organizations face in securing their hybrid cloud environments?
• You do IR so in your experience, what are top 5  mistakes organizations make that lead to cloud incidents?
• How and why do organizations get the attack surface wrong? Are there pillars of attack surface?
• We talk a lot about how IAM matters in the cloud.  Is that true that AD is what gets you in many cases even for other clouds?
• What is your best cloud incident preparedness advice for organizations that are new to cloud and still use on-prem as well?