Crying Out Cloud

🚨 Everything you need to know about CodeBreach with Yuval Avrahami

On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Yuval Avrahami to unpack a major supply-chain flaw that put cloud environments at risk ↓

Misconfigured CodeBuild instances used by AWS themselves

One small regex mistake, huge consequences

How an SDK used by the AWS Console could have been hijacked (!)

The CI/CD controls that can mitigate this risk

🎙️ Shai-Hulud, Shai-Hulud 2.0, are you keeping up?

In this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen go deep into real-world cloud security incidents ↓

1. How Shai-Hulud evolved into Shai-Hulud 2.0

2. A vulnerability affecting Apache Tika

3. React2Shell and its implications

4. Gogs zero-day explained

You DONT want to miss this!
This is a technical, concrete conversation focused on how attacks actually happen, how they evolve, and what defenders need to understand to keep up.

🎙️ AI is changing the rules of cyber, are you keeping up?Eden Naftali goes live with leading voices in cloud security:Ryan Nolette (AWS), @John Miller (Google Cloud), and Alon Schindel (Wiz). This episode is essential listening for anyone defending at cloud scale. 👇🔍 Inside ↓1) How AI is supercharging attacker tactics — from hyper-variable phishing to rapid exploit generation2) The rise of "AI slop" and why it's burning analysts' time3) Emerging AI bug-hunters — what they can (and can't) do

Detection engineering just got real!
Eden Naftali and Amitai sit down with detection engineering powerhouse Alex Hurtado - and it's a must-listen for anyone in cloud security. 👇

🔍 What's inside:

1. The evolution of detection engineering in the cloud — and why traditional rules no longer apply

2. Why DIY detections > vendor defaults

3. How AI is reshaping detection and threat hunting (and why the human in the loop still wins)

🔍 From discovering VS Code supply chain risks → to uncovering Redis Shell vulnerabilities.

Eden Naftali and Amitai sat down to unpack: 👇

• How VS Code extensions became a critical supply chain risk (w/ Rami McCarthy)

• What RediShell reveals about attacker innovation

• Where AI is being weaponized in modern malware

🎙️ Listen now to our NEW Crying Out Cloud episode

🚨 The kernel-level security revolution you can't ignore — a must-listen with Liz Rice

Eden Naftali and Amitai sit down with Liz Rice, Chief Open Source Officer at Isovalent (Cisco), and a global expert in eBPF, containers, and Kubernetes security.

🎙️ In this episode:

• How eBPF is reshaping cloud security from the ground up

• Practical strategies to tackle open source supply chain attacks (a hot topic given today’s events)

A must-listen for anyone building or securing cloud infrastructure in an era of AI coding and supply chain attacks.

🔐 Erik Bloch on his path from military hacker to Illumio security leader.

Eden Naftali and Amitai sat down with Erik Bloch & here's what they covered 👇

1. How starting in the military shaped Erik's approach to security

2. Building and scaling cloud detection & response teams

3. Converting security metrics into actionable business KPIs

🚨 How do you build a 4,000+ strong student-tech community from scratch?Eden Naftali and Amitai sat down with Day Johnson, Security Engineer at  @amazon  , ex-Datadog, founder of CyberWox Academy.What they covered 👇- Detection engineering that works at scale- What breaks IR processes (and how to fix them)- Real talk on breaking into security without shortcutsAlso: why being the "tech kid" in your neighborhood might just launch your whole career.

💡 From cloud chaos to career confessions: live with security minds from RiotGames & Microsoft.
Eden Naftali went live, and got personal, with 3 leaders shaping the future of cloud and cybersecurity:

• Nicole Dove, Head of Security Engineering at @Riot Games

• Sherrod DeGrippo, Director of Threat Intelligence Strategy at Microsoft

• Alon Schindel, VP of AI & Threat Research at Wiz

What they unpacked? 👇
The heart of threat intel, building trust over tools, and how hobbies reflect how they lead.

This Crying Out Cloud episode from RSA just hits different.

⏱ Chapters
00:05:02 – What it means to be a threat intelligence leader
00:10:08 – How threat intelligence should really look
00:15:48 – Skirting the tough questions in cybersecurity
00:21:07 – Working with third-party vendors in the cloud
00:26:17 – What the security industry is getting wrong
00:31:20 – The special skill of deep research
00:36:20 – A real-world story about leading with trust

#CyberSecurity #CloudSecurity #ThreatIntelligence #Infosec #CloudComputing

🎙️ Scattered Spider's new target? Airlines.Eden Koby Naftali & Amitai Cohen break down the latest in the cloud:1️⃣ A connectivity tool vuln & Open WebUI misconfig putting orgs at risk2️⃣ Why attackers are still tricking help desks (and how!)3️⃣ The "lethal trifecta" of AI agent danger, explained 🧠🤖0:25 – Scattered Spider targets the aviation industry1:38 – Help desk hacks: impersonation & real-world stories4:52 – Teleport vulnerability explained9:48 – AI’s “lethal trifecta” and why it matters#CloudSecurity #ScatteredSpider #AIThreats #HelpDeskAttacks #CryingOutCloud #CybersecurityPodcast