Skip to main content
CPEBuddy
Red Teaming in the Cloud: Why "Least Privilege" is a Broken Concept

Red Teaming in the Cloud: Why "Least Privilege" is a Broken Concept

Source: YouTube · Cloud Security Podcast · published Apr 22, 2026 · 41:36

Penetration Testing
No ratings yet Log in to rate
Transcript Available
Description

Bloodhound is utilized in approximately 95% of global penetration tests, serving as a critical tool for mapping identities and permissions 0:00.

Key Takeaways:
• Bloodhound acts like "Google Maps" for attackers, weaving through organizational identities to identify attack paths 0:04.
• A significant portion of accounts using Bloodhound hold highly privileged roles, which is considered a major security violation 0:13.
• Gaining domain admin access allows attackers to bypass Multi-Factor Authentication (MFA) entirely 0:18.
• Once an attacker has system access, they can operate as the user without needing their password or MFA credentials 0:26.

Despite security advancements, the widespread use of privileged accounts and the ability to bypass MFA highlight persistent risks in identity management.

Sources:

  • 0:00 Introduction to Bloodhound's prevalence in penetration testing.
  • 0:04 Explanation of Bloodhound's function in mapping identities.
  • 0:13 Statistics on privileged roles using the tool.
  • 0:18 Discussion on domain admin access and MFA bypass.
  • 0:26 Implications of system access on user authentication.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Bloodhound is uh used in probably 95% of penetration tests worldwide. It weaves through identities and permissions and basically is like Google Maps for attacking an organization. 100% of the accounts that we looked at were doing it. And 70% of them were doing like the most privileged roles, which is like a huge no-no. Put it in reduce to it. Gain lower woman used to be I have domain admin access. >> Yep. Is that still a thing? Yeah, unfortunately, you can sprawl out to other systems. You've already satisfied the MFA, [music] and if I have access to your system, I can now operate as you. I have no need for your password. I don't need your MFA at all. Does that mean over 30 years we've also dialed it up quite a lot over the years? Yeah, in a 10,000 identity environment, which is not a lot, …