Crying Out Cloud

Latest Episodes:

post:Invent with Scott Piper (re:Invent digest) Dec 13, 2024

Show notes

🎙️ Unpack AWS re:Invent's top announcements, trends, and what's next for cloud practitioners with @Scott Piper! Join Eden Naftali and Amitai Cohen in our latest #CryingOutCloud episode featuring Scott Piper, Wiz's Principal Cloud Security Researcher and "cloud security historian". In this episode: 🌟 AWS re:Invent highlights: Aurora DSQL, Nova genAI, EKS Auto Mode 🔒 Security updates on RCPs, VPC Block Public Access, Declarative Policies for EC2 🎬 Scott's favorite cloud-themed movies from Wiz Video World (Pulp Encryption, anyone?)

Red Team Tactics with EA’s Johann Rehberger Nov 29, 2024

Show notes

Dive into the latest #CryingOutCloud episode featuring Johann Rehberger!

Join Eden and Amitai as they sit down with Johann Rehberger, Red Team Director at @electronicarts and a cybersecurity expert. Johann also publishes innovative security research on his blog, Embrace the Red.

What you'll learn:

📌 Red teaming strategies to strengthen security programs

📌 Insights from Johann’s cutting-edge AI security research and experience

📌 The funny story behind Johann’s alias, Wunderwuzzi

Tune in now! 🎧

Canadian Cybersecurity, Open Source Risks, and AppSec Insights with Tanya Janca Nov 08, 2024

Show notes

🎙️ Tune in to the latest #CryingOutCloud episode featuring Tanya Janca, where we dive into all things cloud! Join Eden and Amitai as they welcome Tanya Janca, founder of 'We Hack Purple', and the author of 'Alice and Bob Learn Application Security'. She's seen it all—from launching AppSec programs to teaching secure coding and leading on education at Semgrep. In this episode: 🌐 Building security programs from scratch 🔍 The value of static analysis tools for developers 🇨🇦 The Canadian cybersecurity landscape and her take on global challenges 💡 Tips for securing AI applications in the age of generative AI

Hybrid Cloud Attacks, Linux Malware, and LLMJacking Exposed Oct 29, 2024

Show notes

🎙️ Ready for the latest on Hybrid Cloud Attacks, Linux Malware, and LLMJacking? Join our hosts Eden Koby Naftali and Amitai Cohen in our NEW #CryingOutCloud episode. In this episode: 📌 The perfctl malware campaign—stealthily mining crypto on thousands of Linux machines undetected for years 📌 Storm-0501 hybrid cloud attacks, targeting everything from hospitals to law enforcement, with ransomware and stolen admin credentials 📌 LLMJacking—the latest evolution in malicious cloud access, selling AI access on underground markets

AI Toolkit Risks, CUPS Vulnerabilities, and Google's Infostealer Defenses Oct 08, 2024

Show notes

🎙️ Catch the latest episode of #CryingOutCloud, where Amitai Cohen and Eden Koby Naftali tackle key cloud security challenges from AI Toolkit Risks to CUPS Vulnerabilities! Tune in to hear about: 📌 Wiz Research discovered a vulnerability affecting the Nvidia container toolkit 📌 Google's novel Info Stealers Mitigations 📌 All the talk around the CUPS vulnerabilities 📌 How to leverage Atomic Cloud IOCs [And so much more...]

From NASA to GitLab: Democratizing Security, Open Source, and Empowering Women – With: Julie Davila Oct 04, 2024

Show notes

📢 Tune in for the special episode of Crying Out Cloud with @Gitlab 's Julie Davila! 🚀 Join our Co-host Eden Koby Naftali and the cybersecurity leader Julie Davila, VP of Product Security at GitLab as they dive into: 📌 Balancing transparency in open-source tooling with security risks. 📌 Democratizing security: How GitLab empowers engineers to take ownership of security without disrupting their workflow. 📌 Plus, insights into empowering women in cloud security and why diverse representation is crucial for the industry's future.

Azure DDoS, Certificate Revocations, and ESXi Ransomware Aug 12, 2024

Show notes

📢 From DDoS attacks to discovering a new cryptojacking campaign, tune in to our NEW episode of #CryingOutCloud to learn about all the latest cloud security news. Join our hosts Eden and Amitai as they dive into the latest cloud security stories: * SeleniumGreed: Wiz Research discovered a new cryptojacking campaign targeting SeleniumGrid * Why your Starbucks app went down? * Internet chaos and lessons learned from DigiCert revoked certificates. * ESXi ransomware: The danger of trusting by name.

Navigating Hyper Growth, AI Impact, and Mandiant Memories - Special Guest: Ryan Kazanciyan Aug 05, 2024

Show notes

📢 Tune in for an exclusive session with Ryan Kazanciyan on securing a security vendor, hyper-growth, and AI impact in the latest podcast episode of #CryingOutCloud! Join our hosts, Amitai Cohen and Eden Koby Naftali, as they dive into cloud security with Ryan Kazanciyan, our seasoned expert leading security at @Wiz. 🔍 Episode Highlights: 📌 Managing security during hyper growth: challenges and lessons learned. 📌 Ryan's experiences at Mandiant and the impact of the APT1 investigation on his approach to security. 📌 Current security trends and the role of AI in security. 📌 Ensuring safe use of AI tools like ChatGPT within the organization for internal use and product development.

SAPwned: SAP AI Core vulnerabilities - Special Guest: Hillai Ben-Sasson Jul 17, 2024

Show notes

📢 Tune in to our special episode with Hillai Ben-Sasson with all you need to know about #SAPwned. TL;DR - The Wiz Research Team uncovered serious vulnerabilities in SAP AI Core, revealing potential risks in #AI infrastructure.

CROC Talks - Securing DBs, Cloud Threat Intel, and Detection- Special Guest: Snowflakes’ Haider Dost Jul 15, 2024

Show notes

📢 Tune in to Snowflake's Haider Dost for an exclusive session on Securing Databases, Cloud Threat Intelligence, and Detection strategies.

The latest podcast episode of #CryingOutCloud is LIVE! Join our special hosts, @Alon Schindel and @Eden, as they dive deep into the world of cloud security with Haider Dost, Head of Global Threat Detection and Threat Intelligence at Snowflake. 🔍 Episode Highlights: 📌 Recent campaign targeting Snowflake customers. 📌 Discussion on the new mandatory MFA for Snowflake admins and its impact. 📌 Architecture of detection in the cloud & logging. What does it mean to work in a highly regulated environment compared to a fast-growing company like Snowflake. 📌 Defining "good security" in traditional vs. cloud-native settings.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected

Our TOPPODCAST Picks

Follow Us

Stay Connected

Crying Out Cloud

Related Podcasts

1

2

3

4

5

6