All Tracks
SURFACE//SPRAWL Specialist

The Sprawl: Cloud, OT, Mobile & Mail

The old perimeter is gone. Today's enterprise is a sprawl of rented cloud accounts, ephemeral containers, decades-old factory controllers, employees' personal phones, and an email system built in an age of implicit trust. This track walks the whole surface — how each piece works, how attackers actually abuse it, and the specific controls that keep the sprawl from becoming a breach.

◈ 6 modules ⧗ ~1.8 hours 0% complete

What you'll be able to do

  • Apply the cloud shared responsibility model and explain why misconfiguration — not provider zero-days — is the dominant cloud risk.
  • Trace a real cloud identity attack from an SSRF bug through the instance metadata service to stolen credentials and exposed storage.
  • Reason about container and Kubernetes attack surface: image layers, the Docker socket, RBAC, admission control, and supply-chain provenance.
  • Explain why OT/ICS inverts the security priorities of IT, and connect named incidents (Stuxnet, TRITON, the Ukraine grid attacks) to the systems they hit.
  • Design an enterprise mobile posture across iOS and Android using MDM/UEM, work profiles, attestation, and defenses against smishing and mercenary spyware.
  • Deploy SPF, DKIM, and DMARC correctly — including alignment and enforcement — and recognize Business Email Compromise and post-takeover mailbox abuse.

Module Path

  1. 01

    Cloud Security Foundations

    The cloud is just someone else's computer — and knowing exactly which parts are yours to defend is the whole game.

  2. 02

    Cloud Identity & Data Exposure

    In the cloud, identity is the perimeter — and a single leaked credential can turn a small bug into a nine-figure breach.

  3. 03

    Containers & Kubernetes

    Ship the app and its whole world in a box — then learn every seam in that box an attacker can pry open.

  4. 04

    OT & ICS Security

    Where a security failure isn't a data breach — it's a turbine, a floodgate, or a chemical plant behaving badly.

  5. 05

    Enterprise Mobile Security

    Every employee carries a networked camera, microphone, and credential vault in their pocket — and half of them are personal devices.

  6. 06

    Email Authentication & Domain Trust

    Email was built to trust anyone who says who they are — and undoing that mistake is the fix most organizations still skip.

ESC
↑↓ navigate jack in