#10 - fwd:cloudsec With Special Guest Scott Piper
fwd:cloudsec event special - Featuring our special wizard guest Scott Piper, who is also the co-founder of fwd:cloudsec!
Omer Mosheiov
ํ์บ์คํธ
#8 - GameOverlay โ privilege escalation vulnerabilities in Ubuntu
๐ฟ๐ค Everything you need to know about this month's cloud security drama in the latest "Crying Out Cloud" episode!
In this edition, we explore THREE captivating stories ๐๐
1๏ธโฃ "GameOverlay" unveiled: Ubuntu's privilege escalation vulnerabilities ๐ฑ โ Wiz Research uncovered a pair of vulnerabilities that's affecting 40% of Ubuntu cloud machines! We've got the scoop on what you must know.
2๏ธโฃ Unmasking "P2PInfect": The botnet targeting Redis! ๐ค โ Ever wondered how a botnet hijacks your exposed Redis instances? Let's get into the nitty-gritty of this attack and find out how to defend your environment.
3๏ธโฃ Jumpcloud's dance with North Korea: A supply chain saga ๐๏ธ -โJoin us as we uncover the tale of Jumpcloud's breach and its uncanny link to North Korea. Dive deep into the investigation with us.
๋ฆฌ์์ค
- https://www.wiz.io/blog/ubuntu-overlayfs-vulnerability
- https://ubuntu.com/security/CVE-2023-2640
- https://ubuntu.com/security/CVE-2023-32629
- https://www.cadosecurity.com/redis-p2pinfect/
- https://unit42.paloaltonetworks.com/peer-to-peer-worm-p2pinfect/
- https://www.mandiant.com/resources/blog/north-korea-supply-chain
- https://www.sentinelone.com/labs/jumpcloud-intrusion-attacker-infrastructure-links-compromise-to-north-korean-apt-activity/
- https://jumpcloud.com/blog/security-update-incident-details
- https://jumpcloud.com/support/july-2023-iocs
- https://github.blog/2023-07-18-security-alert-social-engineering-campaign-targets-technology-industry-employees/
- https://blog.phylum.io/sophisticated-ongoing-attack-discovered-on-npm/
๋ ๋ง์ ์ํผ์๋
Crying Out Cloud๋ ๋ด์ค๋ ํฐ์ด๊ธฐ๋ ํฉ๋๋ค!
์์ ๋ฐ ์ ๋ณด ์ ์ง: ์ต์ ํด๋ผ์ฐ๋ ๋ณด์ ๋ด์ค, ์ค์ ๊ณต๊ฒฉ ์ธ์ฌ์ดํธ ๋ฐ ์ ๋ฌธ๊ฐ ์ง์นจ์ ๋ฐ์ ํ๊ฒฝ์ ๋ณดํธํ์ญ์์ค.
๊ฒ์์ ํ๋๋ฅผ ๋ฐ๊พธ๋ ๋ด์ค
์ ๊ณ๋ฅผ ๋คํ๋ค๊ณ ์๊ณ ์ฌ๋ฌ๋ถ์ ๊ด์ฌ์ด ํ์ํ ์ต์ ํด๋ผ์ฐ๋ ๋ณด์ ์ทจ์ฝ์ฑ๊ณผ ํ์ ์ ๋ํ ์์ฝ์ ๋๋ค.
๊ณ ์ ํ Wiz ์ธ์ฌ์ดํธ
์ฐ๊ตฌ ๋ฐ์ดํฐ ๋ด๋ถ ์ดํด๋ณด๊ธฐ - ์ค์ ํด๋ผ์ฐ๋ ํ๊ฒฝ์์ ํ์งํ ์ค์ ๊ณต๊ฒฉ ๊ฒฝ๋ก์ ํต๊ณ๋ฅผ ๊ธฐ๋ฐ์ผ๋ก ํฉ๋๋ค.
์ค์ ํ ์คํธ๋ฅผ ๊ฑฐ์น ์กฐ์ธ
ํ์ฌ์์ ๋ฐ์ดํฐ ์นจํด๋ฅผ ๋ฐฉ์งํ๋ ๋ฐฉ๋ฒ๊ณผ ์ ๋ฐ์ ์ธ ํด๋ผ์ฐ๋ ๋ณด์ ์ ๋ต์ ๊ฐ์ ํ๋ ๋ฐฉ๋ฒ์ ๋ํ ์ํ ์ฐ๊ตฌ ํ์ ํ์ ๋๋ค.
ํด๋ผ์ฐ๋ ๋ณด์์ ์ต์ ์ ๋ฐ์ดํธ๋ฅผ ๋ฐ์ ํธ์งํจ์ผ๋ก ์ง์ ๋ฐ์ผ๋ ค๋ฉด ๋ฑ๋กํ์ญ์์ค.