#7 - The Future Of The Cloud (Special Guest - Corey Quinn)
Corey Quinn joins "Crying Out Cloud" to discuss cloud evolution, Microsoft MSA, usage & misconfigurations
Omer Mosheiov
Podcast (in inglese)
#8 - GameOverlay – privilege escalation vulnerabilities in Ubuntu
🍿🤏 Everything you need to know about this month's cloud security drama in the latest "Crying Out Cloud" episode!
In this edition, we explore THREE captivating stories 📚🔍
1️⃣ "GameOverlay" unveiled: Ubuntu's privilege escalation vulnerabilities 😱 — Wiz Research uncovered a pair of vulnerabilities that's affecting 40% of Ubuntu cloud machines! We've got the scoop on what you must know.
2️⃣ Unmasking "P2PInfect": The botnet targeting Redis! 🤖 — Ever wondered how a botnet hijacks your exposed Redis instances? Let's get into the nitty-gritty of this attack and find out how to defend your environment.
3️⃣ Jumpcloud's dance with North Korea: A supply chain saga 🕊️ -—Join us as we uncover the tale of Jumpcloud's breach and its uncanny link to North Korea. Dive deep into the investigation with us.
Risorse
- https://www.wiz.io/blog/ubuntu-overlayfs-vulnerability
- https://ubuntu.com/security/CVE-2023-2640
- https://ubuntu.com/security/CVE-2023-32629
- https://www.cadosecurity.com/redis-p2pinfect/
- https://unit42.paloaltonetworks.com/peer-to-peer-worm-p2pinfect/
- https://www.mandiant.com/resources/blog/north-korea-supply-chain
- https://www.sentinelone.com/labs/jumpcloud-intrusion-attacker-infrastructure-links-compromise-to-north-korean-apt-activity/
- https://jumpcloud.com/blog/security-update-incident-details
- https://jumpcloud.com/support/july-2023-iocs
- https://github.blog/2023-07-18-security-alert-social-engineering-campaign-targets-technology-industry-employees/
- https://blog.phylum.io/sophisticated-ongoing-attack-discovered-on-npm/
Altri episodi
#6 - Chinese Spies Acquire Keys To The Azure Kingdom
On this episode: Chinese hackers breach US emails. Silent Bob & Team TNT return. Russian hackers exploit Office Zero Day
Omer Mosheiov
#5 - Peeling back the layers of MOVEit Transfer 0day vulnerabilities
Spoiler Alert: We've got Scott Piper, the cloud security guru, joining the conversation too!
Omer Mosheiov
Crying out Cloud è anche una newsletter!
Rimani al sicuro e informato: ricevi le ultime notizie sulla sicurezza del cloud, approfondimenti sugli attacchi reali e la guida di esperti per proteggere il tuo ambiente.
Notizie rivoluzionarie
La nostra carrellata delle ultime vulnerabilità e innovazioni della sicurezza cloud che stanno scuotendo il settore e richiedono la tua attenzione.
Approfondimenti unici su Wiz
Uno sguardo all'interno dei nostri dati di ricerca, basati su statistiche di percorsi di attacco reali che abbiamo rilevato in ambienti cloud reali.
Consigli testati sul campo
Suggerimenti del nostro team di ricerca sulle minacce su come prevenire le violazioni dei dati nella tua azienda e su come migliorare la tua strategia di sicurezza cloud complessiva.
Iscriviti per ricevere gli ultimi aggiornamenti sulla sicurezza del cloud direttamente nella tua casella di posta