Name: How a Clean Security Audit Became a Breach Notification Six Months Later
Start: 2026-09-22T13:00:00-0700
End: 2026-09-22T13:55:00-0700

How a Clean Security Audit Became a Breach Notification Six Months Later

Tuesday September 22, 2026 1:00pm - 1:55pm PDT

Pre-deployment security reviews cover what you configured. They do not cover what your environment looks like six months later after multiple teams have touched it, new services have been granted access, and permissions have accumulated in ways nobody explicitly decided. Most organizations treat a clean security review as a checkpoint rather than a snapshot, and that distinction matters a great deal when something goes wrong.

This session is built around a real incident. A cloud environment passed its security review. IAM configurations were reasonable at the time of review. What the review did not cover was any mechanism to detect when those configurations drifted over time through legitimate activity: new role bindings added by different teams for different features, each individually justifiable, collectively dangerous. Six months later that drift became the entry point for a breach.

The talk walks through the full incident arc: what the environment looked like before and after, what the attack activity looked like in audit logs and why existing alerts did not fire, and what the architecture looked like after being rebuilt with configuration drift detection as a first-class concern. All tooling demonstrated is native to the cloud platform, no third-party products. Attendees leave with the specific log queries, alerting configurations, and policy controls that would have caught this incident before it became one.

Speakers

Advait Patel

Senior Site Reliability Engineer, Broadcom

Advait Patel is a Senior Site Reliability Engineer at Broadcom and the creator of DockSec, an open-source, AI-powered Docker security analyzer. With over 8+ years of experience in cloud-native security, DevSecOps, and secure software supply chains, he is passionate about building... Read More →

Tuesday September 22, 2026 1:00pm - 1:55pm PDT

Deployment and Maintenance

Audience All

OWASP 25th Anniversary Virtual Conference (September)

Advait Patel

Attendees (2)

Get help with the event

OWASP 25th Anniversary Virtual Conference (September)

Advait Patel

Attendees (2)

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Get help with the event