Join our lively hosts, Eden and Amitai, as they explore the most fascinating cloud security news of the month.
On this episode:

🧃🔗 More juice on 3CX supply chain attack
✂️💔 PaperCut vulnerabilities
📦🔓 Capita exposed a bucket with sensitive data for 7 years
🚗☁️ Toyota cloud misconfiguration leaked customer data for 10 years
🚢🔄 Trend of hijacking containers for traffic routing

#4 - Daisy Chain: A Double Supply Chain Attack

How AI just broke PHP (and 70% of the internet).

On this episode of Crying Out Cloud, Amitai Cohen sits down with Sagi Tzadik (Wiz Research) and Thai Duong (Calif) to unpack a massive PHP RCE vulnerability discovered entirely by AI agents.
This isn't just another zero-day story. It's a look at the terrifying new reality of "agentic exploit development." What used to take human researchers months of tedious lab setups and debugging to weaponize a memory corruption bug took AI agents a couple of weeks, working while the researchers slept.

What's Inside:
- How an AI model looking for a Drupal bug accidentally found a foundational PHP flaw from 2004.
- Why AI scaling exploit development across multiple software versions changes the threat landscape.
- The massive logistical challenge of coordinating a patch for 70% of the web alongside distros, WAFs, and cloud providers.
- How defenders can use these same AI agents to scale detection engineering.

Breaking Down PHP2Shell with Sagi Tzadik & Thai Duong

On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with John Hultquist, Chief Analyst at Google Threat Intelligence Group (ex-Mandiant, ex-FireEye, founder of CYBERWARCON & SLEUTHCON).

Drawing on over two decades of tracking state-sponsored adversaries like Sandworm, John cuts through the hype to explain what modern threat intelligence actually does: it keeps CISOs from burning millions of dollars on the wrong technology, spots adversary shifts before static IOCs exist, and bridges the gap between raw binary reverse-engineering and executive decision-making.

In this episode, John unpacks how threat actors are weaponizing AI and bypassing commercial costs entirely and traces the real shift underway: adversaries embedding adversarial prompt-injection payloads inside malware to shut down automated SOC scanners.

What's Inside:
1. The economics of illicit AI: Underground access vs. hijacked enterprise compute
2. Malware poison pills designed to neutralize automated LLM triage
3. Why firmware and ICS layers are becoming primary targets for disruption
4. Behavioral detection models when living-off-the-land means zero usable IOCs
5. Lessons from tracking Sandworm and convincing leadership to act before the lights go out

AI-Powered Threat Actors, Poison Pills & Cyber Sabotage with John Hultquist

Join our charismatic hosts, @Eden and @Amitai, as they uncover the most captivating cloud security news of the month.

In this action-packed episode:

🕵️‍♂️ Mysterious redirections to adult websites in East Asia
🎣 Crafty hackers using fake Google ads for credential theft
🦪 Don't panic, stay clam: The ClamAV vulnerability
🕹️ Gaming industry under fire: Minecraft and Dota 2 incidents 
🇺🇸 US Department of Defense data exposure drama 
🔗 And the GoDaddy supply chain attack that everyone's talking about!

#2 - Hijacked Websites In China Redirect Traffic

Ressourcen

Weitere Folgen

#4 - Daisy Chain: A Double Supply Chain Attack

Breaking Down PHP2Shell with Sagi Tzadik & Thai Duong

AI-Powered Threat Actors, Poison Pills & Cyber Sabotage with John Hultquist

Crying Out Cloud Newsletter