CodeBreach: Hijacking the AWS Console with Yuval Avrahami
CodeBreach: how a tiny regex bug in AWS CodeBuild created a serious cloud supply-chain risk
Podcast
🚨 Vibe coding meets critical data exposure: The Moltbook Hack.
On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Gal Nagli to unpack how he compromised the "Facebook for AI Agents" in under an hour ↓
👉🏼 How a simple boolean manipulation (valid: false to true) bypassed authentication 👉🏼 Cloud Database misconfigurations and the failure of Row Level Security (RLS) 👉🏼 How Claude Code was used to identify and exploit the vulnerability The security reality of "Vibe Coding" and zero-manual-code applications
CodeBreach: how a tiny regex bug in AWS CodeBuild created a serious cloud supply-chain risk
🎙️ Shai-Hulud → Shai-Hulud 2.0. React2Shell, Apache Tika & a Gogs zero-day—real cloud attacks, explained.
AI is reshaping cyber defense—from AI-powered attacks to analyst burnout. What matters now at cloud scale.
Mantenha-se seguro e atualizado: receba as últimas notícias sobre segurança em nuvem, insights sobre ataques reais e orientação especializada para proteger seu ambiente.
Inscreva-se para receber as últimas atualizações de segurança em nuvem diretamente na sua caixa de entrada