ํŒŸ์บ์ŠคํŠธ

Hackers Are Hijacking Cloud Keys: The Rise of Cloud-Native Ransomware ๐Ÿ”‘

From Supply Chain Attacks to S3 Ransomware: Critical Cloud Security Stories You Need to Know. ๐ŸŽ™๏ธ In this episode of Crying Out Cloud, Eden and Amitai break down the latest cloud security chaos, from sneaky supply chain attacks to AI-powered malware:

1) How attackers exploited a GitHub misconfiguration to enable a supply chain attack. 2) The latest twist on cloud-native extortion (spoiler: it all comes back to stolen cloud keys). 3) NullifAI โ€“ Malicious AI models hiding in plain sight. 4) whoAMI attack โ€“ The clever AWS AMI name confusion flaw that might catch you off guard.

Crying Out Cloud ๋‰ด์Šค๋ ˆํ„ฐ

์•ˆ์ „ ๋ฐ ์ •๋ณด ์œ ์ง€: ์ตœ์‹  ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ๋‰ด์Šค, ์‹ค์ œ ๊ณต๊ฒฉ ์ธ์‚ฌ์ดํŠธ ๋ฐ ์ „๋ฌธ๊ฐ€ ์ง€์นจ์„ ๋ฐ›์•„ ํ™˜๊ฒฝ์„ ๋ณดํ˜ธํ•˜์‹ญ์‹œ์˜ค.

ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ์˜ ์ตœ์‹  ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐ›์€ ํŽธ์ง€ํ•จ์œผ๋กœ ์ง์ ‘ ๋ฐ›์œผ๋ ค๋ฉด ๋“ฑ๋กํ•˜์‹ญ์‹œ์˜ค.

Wiz๊ฐ€ ๊ท€ํ•˜์˜ ๊ฐœ์ธ ๋ฐ์ดํ„ฐ๋ฅผ ์ฒ˜๋ฆฌํ•˜๋Š” ๋ฐฉ๋ฒ•์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ์ฐธ์กฐํ•˜์‹ญ์‹œ์˜ค. ๊ฐœ์ธ์ •๋ณด์ฒ˜๋ฆฌ๋ฐฉ์นจ.