React2Shell, Shai-Hulud 2.0, Gogs Zero-Day & Tika RCE
🎙️ Shai-Hulud → Shai-Hulud 2.0. React2Shell, Apache Tika & a Gogs zero-day—real cloud attacks, explained.
Omer Mosheiov
팟캐스트
CodeBreach: Hijacking the AWS Console with Yuval Avrahami
🚨 Everything you need to know about CodeBreach with Yuval Avrahami
On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher @Yuval Avrahami to unpack a major supply-chain flaw that put cloud environments at risk ↓
- Misconfigured CodeBuild instances used by AWS themselves
- One small regex mistake, huge consequences
- How an SDK used by the AWS Console could have been hijacked (!)
- The CI/CD controls that can mitigate this risk
더 많은 에피소드
Live Talk: Security Minds from Google Cloud, AWS & Wiz
AI is reshaping cyber defense—from AI-powered attacks to analyst burnout. What matters now at cloud scale.
Omer Mosheiov
Cloud Detection Engineering, AI in the SOC and Parallel Parking with Alex Hurtado
Detection engineering just got real — Eden, Amitai & Alex Hurtado on cloud detections, DIY rules, and AI in the SOC
Omer Mosheiov
Crying Out Cloud 뉴스레터
안전하고 정보를 많이 받으세요: 최신 클라우드 보안 뉴스, 실제 공격 인사이트, 그리고 전문가의 지도를 받아 환경을 보호하세요.
클라우드 보안 최신 업데이트를 직접 받아보시려면 가입하세요