#5 - Peeling back the layers of MOVEit Transfer 0day vulnerabilities
Spoiler Alert: We've got Scott Piper, the cloud security guru, joining the conversation too!
Omer Mosheiov
ポッドキャスト
#6 - Chinese Spies Acquire Keys To The Azure Kingdom
- Chinese Hackers Steal US Gov Emails
- Silent Bob & the Team TNT Comeback
- Russian Hackers Exploit Office Zero Day
- Footloose's 2023 Object-Oriented Sequel: PyLoose
リソース
- https://msrc.microsoft.com/blog/2023/07/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email/
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-193a
- https://blogs.microsoft.com/on-the-issues/2023/07/11/mitigation-china-based-threat-actor/
- https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/
- https://www.wired.com/story/microsoft-cloud-attack-china-hackers/
- https://arstechnica.com/security/2023/07/microsoft-takes-pains-to-obscure-role-in-0-days-that-caused-email-breach/
- https://blog.aquasec.com/threat-alert-anatomy-of-silentbobs-cloud-attack
- https://blog.aquasec.com/teamtnt-reemerged-with-new-aggressive-cloud-campaign
- https://permiso.io/blog/s/agile-approach-to-mass-cloud-cred-harvesting-and-cryptomining/
- https://www.sentinelone.com/labs/cloudy-with-a-chance-of-credentials-aws-targeting-cred-stealer-expands-to-azure-gcp/
- https://twitter.com/AbbyMCH/status/1679509312132005888
- https://sysdig.com/blog/scarleteel-2-0/
- https://twitter.com/maddiestone/status/1678843059294076928
- https://www.microsoft.com/en-us/security/blog/2023/07/11/storm-0978-attacks-reveal-financial-and-espionage-motives/
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884
- https://twitter.com/cyb3rops/status/1680962212804939776
- https://twitter.com/serghei/status/1679246339698315265
- https://www.wiz.io/blog/pyloose-first-python-based-fileless-attack-on-cloud-workloads
その他のエピソード
#1 - CI/CD Supply Chain Attack
Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news.
Eden Naftali, Amitai Cohen
#3 - The BingBang Vulnerability (Special Guest: Ami Luttwak)
For crying out #cloud! Episode 3 of our cloud security podcast is live and you haven't tuned in yet?
Eden Naftali, Amitai Cohen, Ami Luttwak
Crying Out Cloud ニュースレター
安全と情報収集： 最新のクラウドセキュリティ ニュース、実際の攻撃のインサイト、環境を保護するための専門家のガイダンスをお届けします。
クラウドセキュリティの最新情報を受信トレイに直接受信するには、サインアップしてください