#7 - The Future Of The Cloud (Special Guest - Corey Quinn)
Corey Quinn joins "Crying Out Cloud" to discuss cloud evolution, Microsoft MSA, usage & misconfigurations
Omer Mosheiov
Podcast
#8 - GameOverlay â privilege escalation vulnerabilities in Ubuntu
đżđ€ Everything you need to know about this month's cloud security drama in the latest "Crying Out Cloud" episode!
In this edition, we explore THREE captivating stories đđ
1ïžâŁ "GameOverlay" unveiled: Ubuntu's privilege escalation vulnerabilities đ± â Wiz Research uncovered a pair of vulnerabilities that's affecting 40% of Ubuntu cloud machines! We've got the scoop on what you must know.
2ïžâŁ Unmasking "P2PInfect": The botnet targeting Redis! đ€ â Ever wondered how a botnet hijacks your exposed Redis instances? Let's get into the nitty-gritty of this attack and find out how to defend your environment.
3ïžâŁ Jumpcloud's dance with North Korea: A supply chain saga đïž -âJoin us as we uncover the tale of Jumpcloud's breach and its uncanny link to North Korea. Dive deep into the investigation with us.
Ressources
- https://www.wiz.io/blog/ubuntu-overlayfs-vulnerability
- https://ubuntu.com/security/CVE-2023-2640
- https://ubuntu.com/security/CVE-2023-32629
- https://www.cadosecurity.com/redis-p2pinfect/
- https://unit42.paloaltonetworks.com/peer-to-peer-worm-p2pinfect/
- https://www.mandiant.com/resources/blog/north-korea-supply-chain
- https://www.sentinelone.com/labs/jumpcloud-intrusion-attacker-infrastructure-links-compromise-to-north-korean-apt-activity/
- https://jumpcloud.com/blog/security-update-incident-details
- https://jumpcloud.com/support/july-2023-iocs
- https://github.blog/2023-07-18-security-alert-social-engineering-campaign-targets-technology-industry-employees/
- https://blog.phylum.io/sophisticated-ongoing-attack-discovered-on-npm/
Plus d'Ă©pisodes
#6 - Chinese Spies Acquire Keys To The Azure Kingdom
On this episode: Chinese hackers breach US emails. Silent Bob & Team TNT return. Russian hackers exploit Office Zero Day
Omer Mosheiov
#5 - Peeling back the layers of MOVEit Transfer 0day vulnerabilities
Spoiler Alert: We've got Scott Piper, the cloud security guru, joining the conversation too!
Omer Mosheiov
Crier Out Cloud Newsletter
Restez en sécurité et informé : Recevez les derniÚres nouvelles sur la sécurité dans le Cloud, les attaques réelles et des conseils d'experts pour protéger votre environnement.
Inscrivez-vous pour recevoir les derniÚres mises à jour de sécurité dans le cloud directement dans votre boßte de réception