BSides San Antonio 2026: Following Trust Across Applications, Cloud, and Compliance

A recap of BSides San Antonio 2026 highlighting talks that warned how secrets can surface at runtime despite clean source and CI checks, how over-permissioned Azure managed identities and serverless contexts can be abused to obtain tokens, and how compliance often fails when operational evidence is weak; speakers recommended layered defenses (BFF patterns, secrets managers, least-privilege identities), tighter trigger access, and stronger operational ownership to reduce attacker leverage where trust already exists.