Welcome to episode 315 of The Cloud Pod, where the forecast is always cloudy! Your hosts, Justin and Matt, are here to bring you the latest in cloud and AI news, including news about AI from the White House, the newest hacker exploits, and news from CloudWatch, CrowdStrike, and GKE – plus so much more. Let’s get into it!
Titles we almost went with this week:
SharePoint and Tell: Government Secrets at RiskZero-Day Hero: How Hackers Found SharePoint’s Achilles’ HeelAmazon Q Gets an F in Security ClassSpark Joy: GitHub’s Marie Kondo Approach to App DevelopmentNo Code? No Problem! GitHub Lights a Spark Under App CreationGKE Turns 10: Still Not Old Enough to Deploy ItselfA Decade of Containers: Pokémon GO Caught Them AllKubernetes Engine Hits Double Digits, Still Can’t Count Past 9 PodsAccount Names: The Missing Link in AWS Cost OptimizationFlash Gordon Saves Your VMs from the Azure-verseThe Flash: Fastest VM Monitor in the MultiverseCtrl+AI+Delete: Rebooting America’s Artificial Intelligence StrategyThe AImerican Dream: White House Plots Path to Silicon SupremacyCrowdStrike’s Year of Living ResilientlyKernel Panic at the Disco: A Recovery StoryThe Search is Over (But Your Copilot License Isn’t)Ground Control to Major Tom: You’re FiredGPU Booking.com: Reserve Your Neural Network’s Next VacationCalendar Man Strikes Again: This Time He’s Scheduling Your TPUsAirBnB for AI: Short-Term Rentals for Your Machine Learning Models Claude’s World Tour: Now Playing in Every RegionGoing Global: Claude Gets Its Passport Stamped on Vertex AISQS Finally Learns to Share: No More Queue HoggingThe Noisy Neighbor Gets Shushed: Amazon’s Fair Play for QueuesCloudWatch Gets Its AI Degree in ObservabilityTeaching Old Logs New Tricks: CloudWatch Goes GenAIThe Agent Whisperer: CloudWatch’s New AI Monitoring PowersNotebookLM Gets Its PowerPoint LicenseSlides, Camera, AI-ction: NotebookLM Goes VisualThe SSL-ippery Slope: Azure’s Managed Certs Go Public or Go HomeBreaking Bad Certificates: DigiCert’s New Rules Leave Some Apps High and DryFirewall Rules: Now with a Rough Draft FeatureAzure’s New Policy: Think Before You DeployGeneral News
00:50 Hackers exploiting a SharePoint zero-day are seen targeting government agencies | TechCrunch
Microsoft SharePoint servers are being actively exploited through a zero-day vulnerability (CVE-2025-53770), with initial attacks primarily targeting government agencies, universities, and energy companies, according to security researchers.The vulnerability affects on-premises SharePoint installations only, not cloud versions, with researchers identifying 9,000-10,000 vulnerable instances accessible from the internet that require immediate patching or disconnection.Initial exploitation appears t