n|u Hyderabad Meet - August 2023

About this event

Venue:

Salesforce

15th floor, Training room 2, Block 5, DivyaSree Orion IT/ITES SEZ, Survey 66/1 Panmakhta, Raidurg Village, Serilingampally Mandal, Ranga Reddy District, Hyderabad, Telangana 500032

Google Maps Location

Topics:

1. Introduction to Null Hyderabad

2. Security Newsbytes by M P Sandeep

3. Attack Techniques - Often Missed Critical Vulnerabilities by Sarwar Jahan

In this talk, speaker will talk & share in details about finding the vulnerabilities that are often missed during internal and/or external security reviews .

4. K8S audit story: Practical Threat Hunting on Kubernetes Audit Logs by Abhimanyu Iyer

- The talk provides a look at Kubernetes Audit Logs and how to use them for Threat Hunting and Detection. The talk follows a practical attack path against a Kubernetes Cluster and discusses what the Blue Teams should be looking at. The attack path is around 4-5 steps that an attacker would take and we discuss each one from a monitoring and Investigation perspective.

5. Social Break

6. Data Breach Domino Effect: Protecting Business through Third-party Risk Management by Khaja Nizamuddin

- In today's interconnected digital landscape, businesses rely heavily on third-party partnerships to enhance efficiency and expand capabilities. However, this interconnectedness also brings about an increased risk of data breaches that can trigger a domino effect, wreaking havoc on your organisation's sensitive information. This presentation explores the importance of third-party risk management in preventing the data breach domino effect and offers valuable insights into safeguarding business.

7. Feedback & Suggestions

Important Notes:

Please reach the venue at least 20 mins early for the security checks.

Please carry original government-issued ID proof for security checks (Registered name should match with your name on the ID)

Only the speakers are allowed to carry laptops.

About Speakers:

M P Sandeep, currently working with Wipro as senior associate consultant and interested in cyber security.

Sarwar Jahan is an Information Security Engineer with 10+ years of experience who is passionate about learning and sharing knowledge with the AppSec community.

Abhimanyu Iyer works as a Threat Detection Engineer at Salesforce. He has interests towards Kubernetes, Supply Chain, Cloud, Detection Engineering & Horror Movies

Khaja Nizamuddin, with over 11 years of experience in Information Security, Nizam has focused on Governance, Risk, and Compliance. He has worked with top service sector companies, collaborated with Big 4, and gained valuable insights in the field. Throughout his career, he have prioritized building strong frameworks to protect data integrity, availability, and confidentiality. He also been dedicated to identifying and addressing potential risks, making sure organizations are well-prepared to handle threats. In terms of compliance, he has worked to align operations with industry rules and regulations, ensuring all stakeholders' interests are safeguarded.

About null:

null is an open security community for ethical hackers, security professionals, and security enthusiasts, born out of the need for:

Promoting advanced security research. Spreading security awareness among the netizens. A Centralized knowledge base for security-related information. All our Null Hyderabad meets are Free and Open to all, just register and join us.

Please reach out to us for additional information: bheemamahesh [at] gmail [dot] com or vhssunny1 [at] gmail [dot] com or me [at] pavanw3b [dot] com