Hossam Ramzy
SR. Cybersecurity Solutions Architect
Acalvio Technologies
I'm a Senior Cybersecurity Solutions Architect at Acalvio Technologies with 6+ years of experience across offensive security, application security, threat detection, incident response, and cyber deception. My background includes hands-on penetration testing, red teaming, attack simulation, vulnerability management, and enterprise security architecture covering the gulf region. Now I specialize in autonomous cyber deception and active defense, designing deception environments using decoys, honeypots, breadcrumbs, and lures to detect lateral movement, credential theft, and insider threats. I hold OSCP, eWPTXv2, and eJPT certifications and have delivered technical workshops, attack simulations, and public talks focused on emerging threats and practical, real-world defense strategies.
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
From Container to Crown: Breaking and Defending Kubernetes Attack Paths
Kubernetes has become a critical control plane for modern applications, but compromising a single workload does not necessarily mean the attack ends inside the container. Weak workload isolation, excessive service-account permissions, exposed Kubernetes APIs, insecure configurations and cloud identity relationships can create attack paths from an individual pod to the cluster and ultimately to cloud resources.This session demonstrates a realistic cloud-native attack chain in a controlled Kubernetes environment.The attack begins with external application reconnaissance and exploitation of an intentionally vulnerable workload. After obtaining execution inside a container, the attacker enumerates the Kubernetes environment, discovers service-account permissions and attempts to abuse the Kubernetes API to access additional workloads and privileges.The scenario then examines escalation paths involving secrets, privileged workloads, node-level access and cloud workload identities. The objective is to demonstrate how individually minor weaknesses can become a high-impact attack chain when combined through Kubernetes trust relationships.The second part introduces a hardened architecture and replays the attack. The demonstration examines workload isolation, least-privilege service accounts, Kubernetes RBAC, admission controls, secret protection, network segmentation, runtime monitoring and cloud identity boundaries.The session concludes by presenting a practical Kubernetes attack-path methodology that maps relationships between workloads, identities, permissions, nodes and cloud resources and identifies where defensive controls can break the chain before cluster or cloud compromise.
- 12:50
- Thu
- 03 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote