Topic: Penetration Testing Across Hybrid Infrastructure: Cloud, On-Prem, and More
Abstract: As organizations accelerate digital transformation, their attack surface now extends across on-premises infrastructure, public and private clouds, SaaS platforms, remote work environments, and interconnected third-party services. This hybrid architecture introduces new security challenges that traditional penetration testing methodologies alone can no longer fully address. Security teams must adopt a comprehensive testing strategy that reflects how modern adversaries move across diverse environments to identify exploitable weaknesses before they are weaponized. The current webinar explores how penetration testing has evolved to assess complex hybrid infrastructures, where identities, workloads, applications, APIs, containers, cloud-native services, and legacy systems coexist. The session will examine common attack paths that traverse cloud and on-premises environments, highlighting techniques used by modern threat actors to exploit identity misconfigurations, privilege escalation opportunities, insecure APIs, exposed storage, and poorly segmented networks. It will also discuss how continuous attack surface validation, automated security testing, and AI-assisted penetration testing are transforming offensive security by enabling faster vulnerability discovery, improved prioritization, and more frequent security assessments. Joi us to gain insights into planning and executing assessments that span cloud platforms, internal networks, Active Directory, Kubernetes environments, web applications, and externally exposed assets while maintaining operational continuity and regulatory compliance.
Key Takeaways:
- Understand the unique penetration testing challenges associated with hybrid cloud and on-premises infrastructures.
- Learn how attackers exploit trust relationships between cloud services, identities, and traditional enterprise networks.
- Explore best practices for testing cloud workloads, APIs, containers, Kubernetes clusters, Active Directory, and internet-facing applications.
- Discover how AI-assisted penetration testing and continuous validation improve testing coverage, efficiency, and risk prioritization.
- Learn how to integrate penetration testing into DevSecOps, vulnerability management, and enterprise security programs for continuous improvement.
- Identify practical strategies for reducing attack surfaces and strengthening security across complex hybrid environments.
Speaker:
Milton Araújo, Security Researcher
Bio: Milton Araújo is an offensive security specialist with a strong focus on red-team operations, malware development, evasion techniques, and reverse engineering. His work centers on simulating real-world adversaries to help organizations assess and improve their defenses against modern security controls such as EDR, AV, XDR, and sandbox technologies. He regularly conducts advanced penetration tests across infrastructure, web applications, APIs, mobile, and wireless environments, and develops custom implants and stealth execution frameworks. Milton is also an OWASP community contributor, a Certified EC-Council Instructor (CEI), and the host of r19.io, a podcast featuring leading hackers and security researchers from around the world.
