ํŒŸ์บ์ŠคํŠธ

React2Shell, Shai-Hulud 2.0, Gogs Zero-Day & Tika RCE

๐ŸŽ™๏ธ Shai-Hulud, Shai-Hulud 2.0, are you keeping up?

In this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen go deep into real-world cloud security incidents โ†“

  1. How Shai-Hulud evolved into Shai-Hulud 2.0
  2. A vulnerability affecting Apache Tika
  3. React2Shell and its implications
  4. Gogs zero-day explained

You DONT want to miss this! This is a technical, concrete conversation focused on how attacks actually happen, how they evolve, and what defenders need to understand to keep up.

Crying Out Cloud ๋‰ด์Šค๋ ˆํ„ฐ

์•ˆ์ „ํ•˜๊ณ  ์ •๋ณด๋ฅผ ๋งŽ์ด ๋ฐ›์œผ์„ธ์š”: ์ตœ์‹  ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ๋‰ด์Šค, ์‹ค์ œ ๊ณต๊ฒฉ ์ธ์‚ฌ์ดํŠธ, ๊ทธ๋ฆฌ๊ณ  ์ „๋ฌธ๊ฐ€์˜ ์ง€๋„๋ฅผ ๋ฐ›์•„ ํ™˜๊ฒฝ์„ ๋ณดํ˜ธํ•˜์„ธ์š”.

ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ์ตœ์‹  ์—…๋ฐ์ดํŠธ๋ฅผ ์ง์ ‘ ๋ฐ›์•„๋ณด์‹œ๋ ค๋ฉด ๊ฐ€์ž…ํ•˜์„ธ์š”

Wiz๊ฐ€ ๊ท€ํ•˜์˜ ๊ฐœ์ธ ๋ฐ์ดํ„ฐ๋ฅผ ์ฒ˜๋ฆฌํ•˜๋Š” ๋ฐฉ๋ฒ•์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ์ฐธ์กฐํ•˜์‹ญ์‹œ์˜ค. ๊ฐœ์ธ์ •๋ณด์ฒ˜๋ฆฌ๋ฐฉ์นจ.