The Sprawl: Cloud, OT, Mobile & Mail
The old perimeter is gone. Today's enterprise is a sprawl of rented cloud accounts, ephemeral containers, decades-old factory controllers, employees' personal phones, and an email system built in an age of implicit trust. This track walks the whole surface — how each piece works, how attackers actually abuse it, and the specific controls that keep the sprawl from becoming a breach.
What you'll be able to do
- ▸ Apply the cloud shared responsibility model and explain why misconfiguration — not provider zero-days — is the dominant cloud risk.
- ▸ Trace a real cloud identity attack from an SSRF bug through the instance metadata service to stolen credentials and exposed storage.
- ▸ Reason about container and Kubernetes attack surface: image layers, the Docker socket, RBAC, admission control, and supply-chain provenance.
- ▸ Explain why OT/ICS inverts the security priorities of IT, and connect named incidents (Stuxnet, TRITON, the Ukraine grid attacks) to the systems they hit.
- ▸ Design an enterprise mobile posture across iOS and Android using MDM/UEM, work profiles, attestation, and defenses against smishing and mercenary spyware.
- ▸ Deploy SPF, DKIM, and DMARC correctly — including alignment and enforcement — and recognize Business Email Compromise and post-takeover mailbox abuse.
Module Path
- 01
Cloud Security Foundations
The cloud is just someone else's computer — and knowing exactly which parts are yours to defend is the whole game.
17 min 6 briefings - 02
Cloud Identity & Data Exposure
In the cloud, identity is the perimeter — and a single leaked credential can turn a small bug into a nine-figure breach.
18 min 5 briefings - 03
Containers & Kubernetes
Ship the app and its whole world in a box — then learn every seam in that box an attacker can pry open.
18 min 5 briefings - 04
OT & ICS Security
Where a security failure isn't a data breach — it's a turbine, a floodgate, or a chemical plant behaving badly.
19 min 5 briefings - 05
Enterprise Mobile Security
Every employee carries a networked camera, microphone, and credential vault in their pocket — and half of them are personal devices.
17 min 6 briefings - 06
Email Authentication & Domain Trust
Email was built to trust anyone who says who they are — and undoing that mistake is the fix most organizations still skip.
18 min 6 briefings