A cleanup script gone wrong deleted a critical S3 redirection bucket, allowing an attacker to claim the globally unique bucket name and hijack a corporate subdomain - serving illegal Fortune Tiger iGaming content to all visitors for 90 minutes before mitigations were in place.
In this talk, we will walk through the technical details of the takeover, the testing and monitoring gaps that enabled it, and practical steps to prevent similar incidents.
You won't want to miss this talk if you: - Work with cloud infrastructure (AWS, Azure, GCP) and object storage (S3-like) - Write or maintain automation/cleanup scripts - Are cybercurious on Blue Team work
