Crying Out Cloud

By Wiz

Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news. Hosted by experts Eden Naftali and Amitai Cohen, each episode provides in-depth covera... more

· Technology

4.8

2121 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Crying Out Cloud:

How many episodes does Crying Out Cloud have?

The podcast currently has 60 episodes available.

Crying Out Cloud episodes:

April 04, 2024 CROC Talks: Helping Secure Hugging Face Hub - Special Guest: Shir Tamari
🚨 BREAKING: Wiz Research identifies critical risks in #AI-as-a-service 🚨
Dive into Crying Out Cloud's latest episode, featuring a very special guest, Shir Tamari, head of the research team at Wiz. This episode sheds light on the security challenges that come with the rapid integration of AI technologies. Highlights include:
🚀 Exploring the rapid integration of AI and its associated security risks, identified by Wiz Research in collaboration with Hugging Face.
🛡️ Exposing two significant security flaws within Hugging Face's systems: shared inference and CI/CD systems, which could potentially offer unauthorized access to sensitive data.
📢 Highlighting the critical need for robust security frameworks in AI services.
✅ Demonstrating Hugging Face's dedication to security through the adoption of Wiz CSPM, continuous vulnerability assessments, and annual penetration tests, thereby establishing a high standard in AI safety.
...more
12min
March 31, 2024 CROC News - XZ Utils backdoor explained
The backdoor in XZ Utils is shaking the industry 🔔
How could we not talk about it?
Tune in to the special unscheduled episode of Crying Out Cloud with Eden Naftali and Amitai Cohen as they delve into the stealthy supply chain attack!
In this episode:
🔍 The Alert from CISA regarding CVE-2024-3094, a vulnerability in XZ Utils Data Compression Library versions 5.6.0 and 5.6.1
🛑 The potential risks posed by the embedded malicious code and the unauthorized access it may grant to affected systems
🛡️ Security Team Action Plans
Tune in now!
...more
13min
March 26, 2024CROC News: Malicious Repos, Bandwidth Theft, & NVD or NoVD?
🎙️ What is a better way to stay updated on cloud security than a NEW Crying Out Cloud episode!
Join Eden Naftali and Amitai Cohen as they explore what is new and 🔥:
👾 Open-source repos flooded by malicious code.
💻 What is to become of the National Vulnerability Database?
⛓️ Proof of bandwidth cryptojacking
🛠️ Critical vulnerabilities discovered in popular CI/CD tool

Links:
https://apiiro.com/blog/malicious-code-campaign-github-repo-confusion-attack/

https://github.blog/2024-02-29-keeping-secrets-out-of-public-repositories/

https://research.openanalysis.net/github/lua/2024/03/03/lua-malware.html

https://resilientcyber.substack.com/p/death-knell-of-the-nvd

https://sysdig.com/blog/cloud-threats-deploying-crypto-cdn/
...more
32min
March 20, 2024 CROC Talks: Bug Bounty Hunting & Pen Testing with Sam Curry
The NEW exclusive interview with hacker extraordinaire Sam Curry on Crying Out Cloud is out!
Join Eden Naftali and Amitai Cohen as they explore the role of a Bug-Bounty Hunter with Sam Curry:
🔑 Learn about Sam's journey into security research
🛠️ Favorite tools and underrated platforms
🤖 The trustworthiness implications of AI-driven technologies in transportation.
🔒 Vulnerabilities within a major tech company's infrastructure. The tradeoff between scanning gigantic IP ranges and selecting the best research targets.

Important links:
https://samcurry.net/web-hackers-vs-the-auto-industry/
https://samcurry.net/hacking-apple/
https://samcurry.net/points-com/
...more
42min
February 22, 2024 CROC News: Automotive Code Leak & Midnight Blizzard's Heist
Loading from the Cloud...
Season 2 of "CRYING OUT CLOUD" is here!
Join our hosts, Eden and Amitai, as they dive into the latest cloud stories that we can't wait to share with you
Here's a sneak peek into the season's opening:

🚗 Mercedes-Benz Source Code Exposure:
A public GitHub Repo was exposed - allowing unauthorized access to the company's internal servers, including AWS and Azure subscriptions. The credentials remained publicly accessible for 3-4 months. 😱
🌨️ Midnight Blizzard Hits Microsoft:
Russian actors (Midnight Blizzard) got into Microsoft's network and stole employee emails, finding a misconfigured account with a weak password. Among other things, they tried to find out what Microsoft knew about their activity.
🔐 Ivanti Vulnerabilities:
Ivanti's VPN products exposed vulnerabilities, allowing remote code execution and authentication bypass, exploited by a Chinese Threat Actor.
...more
29min
December 21, 2023 #15 - Yinon Costica on AI risks, the importance of positivity and his new year's resolutions
🛡️ Join Eden Naftali & Amitai Cohen's exclusive interview with Yinon Costica, as he brings unparalleled expertise to the table. From his beginnings in Israel's 8200 intelligence unit, through Adallom, which was acquired by Microsoft, to co-founding Wiz
...more
34min
December 10, 2023 #14 - On Executive Orders And AI (Special Guest - Chris Hughes)
🎙️ NEW SPECIAL PODCAST EPISODE WITH @CHRIS HUGHES! 🎙️
Here's a sneak peek into our chat:
🛡️ Join Chris, Amitai, and Eden as they unveil intriguing security nuances between public and private sectors. Gain exclusive insights into FedRAMP, straight from Chris's expertise, and his take on the implications of President Biden's AI order for the cybersecurity landscape.
🌐 How exactly does SBOM adoption act as a shield against supply chain breaches? What other strategies can fortify against such attacks?
🔍 Delve into the post-COVID startup world. Chris touches on the intricacies of the challenges faced, offering a glimpse into how these innovative ventures navigate a changed landscape.
Tune in for a captivating talk below!
...more
35min
November 30, 2023 #13 - Leaky CLIs, glitchy CPUs and risky HARs
🎙️ NEW PODCAST EPISODE ALERT!
Eden and Amitai are back with another wild ride through the cloudy skies on "Crying Out Cloud"!
Here's the scoop for today's adventure:
01:36 - Okta Support System Compromise: 🕵️‍♂️
We unravel the mystery surrounding an unknown threat actor's access to Okta's customer support system. What's an HAR file, and why should you care?
06:30 - Azure CLI Credential Leak (CVE-2023-36052): 💻
Get the lowdown on Microsoft's Azure CLI vulnerability and how this leak happened, why defaults matter, and what the patch means for your Azure CLI setup.
13:17 - Reptar and Cachewarp CPU Vulnerabilities: 💡
CPU vulnerabilities are a trend we can't ignore! Discover why Reptar and Cachewarp CPU vulnerabilities might sound daunting but aren't necessarily the cloud apocalypse. Plus, the juicy details on who's patched and who's snoozing on this issue

Links:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36052
https://cloud.google.com/blog/products/identity-security/google-researchers-discover-reptar-a-new-cpu-vulnerability
https://lock.cmpxchg8b.com/reptar.html
https://cachewarpattack.com/
https://sec.okta.com/harfiles
...more
24min
October 19, 2023 #12 - Chomping at the Bits with Chompie
In our new Crying Out Cloud podcast episode, we're joined by the LEGENDARY Valentina Palmiotti, the one and only Chompie 🚀
✨ In this episode, you'll find:
1. The surprising story behind her hacker alias - "Chompie," 🕵️‍♀️
2. Valentina's insights from her Blackhat presentation, where she challenges security boundaries with kernel post-exploitation techniques 🤯
3. A peek into her day-to-day at IBM X-Force, from research to code auditing and vulnerability analysis 💼
And more!
...more
33min
September 21, 2023 #11 - From SAS token to AI data exposure (with special guest - Hillai Ben-Sasson)
More info here:
https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers
...more
22min

FAQs about Crying Out Cloud:

How many episodes does Crying Out Cloud have?

The podcast currently has 60 episodes available.

More shows like Crying Out Cloud

This American Life by This American Life

This American Life

91,297 Listeners

Hidden Brain by Hidden Brain, Shankar Vedantam

Hidden Brain

43,687 Listeners

Risky Business by Risky Business Media

Risky Business

371 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

651 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,028 Listeners

The Daily by The New York Times

The Daily

113,121 Listeners

Screaming in the Cloud by Corey Quinn

Screaming in the Cloud

92 Listeners

Hacking Humans by N2K Networks

Hacking Humans

315 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

195 Listeners

Practical AI by Practical AI LLC

Practical AI

212 Listeners

Three Buddy Problem by Security Conversations

Three Buddy Problem

61 Listeners

Risky Bulletin by Risky Business Media

Risky Bulletin

45 Listeners

Prof G Markets by Vox Media Podcast Network

Prof G Markets

1,480 Listeners