#5 - Peeling back the layers of MOVEit Transfer 0day vulnerabilities
Spoiler Alert: We've got Scott Piper, the cloud security guru, joining the conversation too!
Omer Mosheiov
Podcast
#6 - Chinese Spies Acquire Keys To The Azure Kingdom
- Chinese Hackers Steal US Gov Emails
- Silent Bob & the Team TNT Comeback
- Russian Hackers Exploit Office Zero Day
- Footloose's 2023 Object-Oriented Sequel: PyLoose
Resources
- https://msrc.microsoft.com/blog/2023/07/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email/
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-193a
- https://blogs.microsoft.com/on-the-issues/2023/07/11/mitigation-china-based-threat-actor/
- https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/
- https://www.wired.com/story/microsoft-cloud-attack-china-hackers/
- https://arstechnica.com/security/2023/07/microsoft-takes-pains-to-obscure-role-in-0-days-that-caused-email-breach/
- https://blog.aquasec.com/threat-alert-anatomy-of-silentbobs-cloud-attack
- https://blog.aquasec.com/teamtnt-reemerged-with-new-aggressive-cloud-campaign
- https://permiso.io/blog/s/agile-approach-to-mass-cloud-cred-harvesting-and-cryptomining/
- https://www.sentinelone.com/labs/cloudy-with-a-chance-of-credentials-aws-targeting-cred-stealer-expands-to-azure-gcp/
- https://twitter.com/AbbyMCH/status/1679509312132005888
- https://sysdig.com/blog/scarleteel-2-0/
- https://twitter.com/maddiestone/status/1678843059294076928
- https://www.microsoft.com/en-us/security/blog/2023/07/11/storm-0978-attacks-reveal-financial-and-espionage-motives/
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884
- https://twitter.com/cyb3rops/status/1680962212804939776
- https://twitter.com/serghei/status/1679246339698315265
- https://www.wiz.io/blog/pyloose-first-python-based-fileless-attack-on-cloud-workloads
More episodes
#1 - CI/CD Supply Chain Attack
Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news.
Eden Naftali, Amitai Cohen
#3 - The BingBang Vulnerability (Special Guest: Ami Luttwak)
For crying out #cloud! Episode 3 of our cloud security podcast is live and you haven't tuned in yet?
Eden Naftali, Amitai Cohen, Ami Luttwak
Crying Out Cloud Newsletter
Stay Safe & Informed: Receive the Latest Cloud Security News, Real Attack Insights, and Expert Guidance to Protect Your Environment.
Sign up to receive the latest updates in cloud security directly to your inbox