Part 6 — Cloud Automation Is the New Persistence Layer

Short-lived credentials do not mean short-lived compromise. DEF CON 34 showed how attackers can persist by controlling the automation that generates fresh authority. In cloud environments, the most durable implant may no longer be malware—it may be legitimate automation.