CodeBreach: Hijacking the AWS Console with Yuval Avrahami
CodeBreach: how a tiny regex bug in AWS CodeBuild created a serious cloud supply-chain risk
Podcast
🚨 Vibe coding meets critical data exposure: The Moltbook Hack.
On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Gal Nagli to unpack how he compromised the "Facebook for AI Agents" in under an hour ↓
👉🏼 How a simple boolean manipulation (valid: false to true) bypassed authentication 👉🏼 Cloud Database misconfigurations and the failure of Row Level Security (RLS) 👉🏼 How Claude Code was used to identify and exploit the vulnerability The security reality of "Vibe Coding" and zero-manual-code applications
CodeBreach: how a tiny regex bug in AWS CodeBuild created a serious cloud supply-chain risk
🎙️ Shai-Hulud → Shai-Hulud 2.0. React2Shell, Apache Tika & a Gogs zero-day—real cloud attacks, explained.
AI is reshaping cyber defense—from AI-powered attacks to analyst burnout. What matters now at cloud scale.
Restez en sécurité et informé : Recevez les dernières nouvelles sur la sécurité dans le Cloud, les attaques réelles et des conseils d'experts pour protéger votre environnement.
Inscrivez-vous pour recevoir les dernières mises à jour de sécurité dans le cloud directement dans votre boîte de réception