Organizations are increasingly adopting cloud technologies, accelerating digital transformation, with artificial intelligence playing a key role in enhancing this process. However, as companies migrate to the cloud, their attack surface also expands significantly, making security a critical consideration.

This session will examine various methods attackers use to compromise Azure environments, focusing on common vulnerabilities such as misconfigurations and excessive privileges often present in organizations. We will also demonstrate a common attack chain where attackers go from a successful phishing to Azure’s privileged access.

We will also cover best practices for configuring defenses that help monitor, identify, and respond to threats. Additionally, we will describe how Microsoft’s Security stack can support organizations in strengthening their overall security posture and achieving cyber resilience.

Whether you’re experienced in red teaming or defense, or work as a developer or automation engineer, this session seeks to demonstrate how cloud environments can be compromised and what everyone should know to help maintain a resilient cloud setup.