#5 - Peeling back the layers of MOVEit Transfer 0day vulnerabilities
Spoiler Alert: We've got Scott Piper, the cloud security guru, joining the conversation too!
Omer Mosheiov
Podcast (in inglese)
#6 - Chinese Spies Acquire Keys To The Azure Kingdom
- Chinese Hackers Steal US Gov Emails
- Silent Bob & the Team TNT Comeback
- Russian Hackers Exploit Office Zero Day
- Footloose's 2023 Object-Oriented Sequel: PyLoose
Risorse
- https://msrc.microsoft.com/blog/2023/07/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email/
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-193a
- https://blogs.microsoft.com/on-the-issues/2023/07/11/mitigation-china-based-threat-actor/
- https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/
- https://www.wired.com/story/microsoft-cloud-attack-china-hackers/
- https://arstechnica.com/security/2023/07/microsoft-takes-pains-to-obscure-role-in-0-days-that-caused-email-breach/
- https://blog.aquasec.com/threat-alert-anatomy-of-silentbobs-cloud-attack
- https://blog.aquasec.com/teamtnt-reemerged-with-new-aggressive-cloud-campaign
- https://permiso.io/blog/s/agile-approach-to-mass-cloud-cred-harvesting-and-cryptomining/
- https://www.sentinelone.com/labs/cloudy-with-a-chance-of-credentials-aws-targeting-cred-stealer-expands-to-azure-gcp/
- https://twitter.com/AbbyMCH/status/1679509312132005888
- https://sysdig.com/blog/scarleteel-2-0/
- https://twitter.com/maddiestone/status/1678843059294076928
- https://www.microsoft.com/en-us/security/blog/2023/07/11/storm-0978-attacks-reveal-financial-and-espionage-motives/
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884
- https://twitter.com/cyb3rops/status/1680962212804939776
- https://twitter.com/serghei/status/1679246339698315265
- https://www.wiz.io/blog/pyloose-first-python-based-fileless-attack-on-cloud-workloads
Altri episodi
#1 - CI/CD Supply Chain Attack
Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news.
Eden Naftali, Amitai Cohen
#3 - The BingBang Vulnerability (Special Guest: Ami Luttwak)
For crying out #cloud! Episode 3 of our cloud security podcast is live and you haven't tuned in yet?
Eden Naftali, Amitai Cohen, Ami Luttwak
Crying out Cloud è anche una newsletter!
Rimani al sicuro e informato: ricevi le ultime notizie sulla sicurezza del cloud, approfondimenti sugli attacchi reali e la guida di esperti per proteggere il tuo ambiente.
Notizie rivoluzionarie
La nostra carrellata delle ultime vulnerabilità e innovazioni della sicurezza cloud che stanno scuotendo il settore e richiedono la tua attenzione.
Approfondimenti unici su Wiz
Uno sguardo all'interno dei nostri dati di ricerca, basati su statistiche di percorsi di attacco reali che abbiamo rilevato in ambienti cloud reali.
Consigli testati sul campo
Suggerimenti del nostro team di ricerca sulle minacce su come prevenire le violazioni dei dati nella tua azienda e su come migliorare la tua strategia di sicurezza cloud complessiva.
Iscriviti per ricevere gli ultimi aggiornamenti sulla sicurezza del cloud direttamente nella tua casella di posta