On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down to unpack the wildest cloud security news of the month: from AI chatbots going rogue to massive supply chain battles.

What's Inside:
- The WP2Shell vulnerability and why 60% of WordPress instances were at risk
- GitHub's aggressive mitigations to combat TeamPCP's supply chain attacks
- Why 20-year-old vulnerabilities like SquidBleed are suddenly being unearthed by AI
- The Klue hack and the hidden dangers of over-privileged AI agents in Salesforce
- How attackers bypassed Meta's security using VPNs, deepfakes, and a gullible AI support bot

WordPress RCE, GitHub vs TeamPCP & Why Meta Disabled Its Support Bot

:rotating_light: AI-Powered Malware and the Future of Threat Hunting
On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with John Hammond to unpack the reality of autonomous AI hacking and why cybercriminals are operating like Fortune 500 startups.
1. Why modern ransomware groups have sales teams, HR, and go-to-market strategies.
2. How autonomous AI agents are finding zero-days while researchers sleep.
3. Glimpsing the future of non-deterministic, AI-driven command and control (C2) servers.
4. Real talk on incident response burnout and why the "always-on" hustle is breaking defenders.

Autonomous AI Malware, Threat Actor Startups & Beating Burnout with John Hammond

The AI bug hunting revolution is here, and it just broke Linux.
On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Tim Becker and Jacob Newman from Xint to unpack CopyFail, a powerful vulnerability found using autonomous AI agents.
1. How Xint's custom LLM harness uncovered CopyFail, a privilege escalation bug affecting almost every Linux machine since 2017.
2. The harsh reality of vulnerability disclosure in the AI era and why 90 days is too long when models can weaponize exploits instantly by patch-diffing.
3. The evolution of AI agents in security, from the DARPA AI Cyber Challenge to Claude 3.5 Sonnet to Mythos.
4. The importance of benchmarking in agentic workflows.

The Linux CopyFail Vulnerability & AI Bug Hunting with Xint

AI is changing the security landscape, but are we automating the wrong things?
On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Daniel Miessler to unpack why most companies are completely unprepared for the AI revolution. Daniel drops some heavy truths about what happens when we automate the "boring" parts of security, and why attackers are currently winning the AI arms race.

What's Inside:
- The "Gym Robot" analogy for operational toil and analyst training
- Why attackers are moving 10X faster with AI than defenders
- The TELOS framework and defining your security goals in text


Empowering Human Potential, AI in Cybersecurity & Scaling Operational Growth with Daniel Miessler

More episodes

WordPress RCE, GitHub vs TeamPCP & Why Meta Disabled Its Support Bot

Autonomous AI Malware, Threat Actor Startups & Beating Burnout with John Hammond

The Linux CopyFail Vulnerability & AI Bug Hunting with Xint

Crying Out Cloud Newsletter