#7 - The Future Of The Cloud (Special Guest - Corey Quinn)
Corey Quinn joins "Crying Out Cloud" to discuss cloud evolution, Microsoft MSA, usage & misconfigurations
Omer Mosheiov
#6 - Chinese Spies Acquire Keys To The Azure Kingdom
- Chinese Hackers Steal US Gov Emails
- Silent Bob & the Team TNT Comeback
- Russian Hackers Exploit Office Zero Day
- Footloose's 2023 Object-Oriented Sequel: PyLoose
Resources
- https://msrc.microsoft.com/blog/2023/07/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email/
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-193a
- https://blogs.microsoft.com/on-the-issues/2023/07/11/mitigation-china-based-threat-actor/
- https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/
- https://www.wired.com/story/microsoft-cloud-attack-china-hackers/
- https://arstechnica.com/security/2023/07/microsoft-takes-pains-to-obscure-role-in-0-days-that-caused-email-breach/
- https://blog.aquasec.com/threat-alert-anatomy-of-silentbobs-cloud-attack
- https://blog.aquasec.com/teamtnt-reemerged-with-new-aggressive-cloud-campaign
- https://permiso.io/blog/s/agile-approach-to-mass-cloud-cred-harvesting-and-cryptomining/
- https://www.sentinelone.com/labs/cloudy-with-a-chance-of-credentials-aws-targeting-cred-stealer-expands-to-azure-gcp/
- https://twitter.com/AbbyMCH/status/1679509312132005888
- https://sysdig.com/blog/scarleteel-2-0/
- https://twitter.com/maddiestone/status/1678843059294076928
- https://www.microsoft.com/en-us/security/blog/2023/07/11/storm-0978-attacks-reveal-financial-and-espionage-motives/
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884
- https://twitter.com/cyb3rops/status/1680962212804939776
- https://twitter.com/serghei/status/1679246339698315265
- https://www.wiz.io/blog/pyloose-first-python-based-fileless-attack-on-cloud-workloads
More episodes
#8 - GameOverlay – privilege escalation vulnerabilities in Ubuntu
🍿🔒 Ubuntu flaws, Redis attacks, Jumpcloud breach - all in this month's "Crying Out Cloud" episode! 🕵️♂️📺
Omer Mosheiov
#9 - The collapse of LAPSUS$ and the risks of AI data poisoning
In today's episode: LAPSUS$ hackers, AI data poisoning, and WinRAR vulnerability (CVE-2023-38831). Stay informed! 🔒🤖💻
Omer Mosheiov
Crying Out Cloud is also a newsletter!
Stay Safe & Informed: Receive the Latest Cloud Security News, Real Attack Insights, and Expert Guidance to Protect Your Environment.
Game-changing news
Our round up of the latest cloud security vulnerabilities and innovations that are shaking up the industry and need your attention.
Unique Wiz insights
An inside look at our research data - based on statistics from real attack paths we detected in real cloud environments.
Battle-tested advice
Tips from our Threat Research team on how to prevent data breaches in your company and how to improve your overall cloud security strategy.
Sign up to receive the latest updates in cloud security directly to your inbox