Crying Out Cloud

Wiz

Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news. Hosted by experts Eden Naftali and Amitai Cohen, each episode provides in-depth coverage of the most important vulnerabilities and incidents from the previous month. Tune in for insightful analysis and expert recommendations to help you safeguard your cloud infrastructure.

  1. The Linux CopyFail Vulnerability & AI Bug Hunting with Xint

    5月20日

    The Linux CopyFail Vulnerability & AI Bug Hunting with Xint

    The AI bug hunting revolution is here, and it just broke Linux. On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Tim Becker and Jacob Newman from Xint to unpack CopyFail, a powerful vulnerability found using autonomous AI agents. 1. How Xint's custom LLM harness uncovered CopyFail, a privilege escalation bug affecting almost every Linux machine since 2017. 2. The harsh reality of vulnerability disclosure in the AI era and why 90 days is too long when models can weaponize exploits instantly by patch-diffing. 3. The evolution of AI agents in security, from the DARPA AI Cyber Challenge to Claude 3.5 Sonnet to Mythos. 4. The importance of benchmarking in agentic workflows.

    51分
  2. Hacking GitHub with a Semicolon & Claude with Sagi Tzadik

    5月1日

    Hacking GitHub with a Semicolon & Claude with Sagi Tzadik

    Wiz researcher Sagi Tzadik joins us to break down how a single semicolon led to a critical Remote Code Execution (RCE) vulnerability in GitHub. For two years, Sagi sat on a lead. Reverse engineering GitHub's microservices manually was too tedious to justify the time. Then, AI agents arrived. By hooking Claude directly into his reverse engineering software, he condensed months of grueling binary analysis into 48 hours. The result? A critical bug in how GitHub handles git push options that exposed both SaaS and Enterprise environments. We get into the weeds on how different microservices interpreting the same input differently creates massive attack surfaces, and why security by obscurity is officially dead in the age of AI. What's Inside: - How combining Claude with the IDA MCP server dramatically sped up the reverse engineering process - The technical anatomy of the GitHub semicolon vulnerability. - Why microservice communication breakdowns lead to critical RCEs. - The massive difference in impact between GitHub.com and GitHub Enterprise Server. - Why Enterprise users need to patch their instances immediately. Resources: - Learn more about the findings at: https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854

    13分
  3. Protecting Vibe Coded Apps and the Shift to "Soft Guardrails" with Igor Andriushchenko

    2月24日

    Protecting Vibe Coded Apps and the Shift to "Soft Guardrails" with Igor Andriushchenko

    Igor Andriushchenko joins Crying Out Cloud to explain how vibe coding changes the role of security engineers. The shift from typing lines of code to shaping entire systems means security teams need new strategies. Developers expect their shipping velocity to increase tenfold with AI assistance. Relying on traditional hard deployment blocks will only cause friction. If you want to understand how to build secure guardrails for AI development without destroying developer momentum, this conversation covers the exact mechanics. What's Inside: The evolution of the Stockholm tech scene and human ambition driven by AI. How Lovable empowers non-developers to build disposable and deeply specific software. The concept of "soft guardrails" and why hard blocks fail in AI-assisted workflows. Future capabilities of AI pen testing using hundreds of autonomous agents. The shared responsibility model when business users build internal applications.

    39分
  4. Neuroscience, AI Research & Hiring Swifties with Alon Schindel

    2月12日

    Neuroscience, AI Research & Hiring Swifties with Alon Schindel

    Agentic AI is coming. Are defenders ready? Alon Schindel, Director of Data & Threat Research at Wiz, joins Eden and Amitai for the Season 3 Finale. This isn't just a recap. It is a look at how top-tier research teams operate at speed. Alon explains why Wiz treats research as a "product" rather than a support function. He details the "DeepLeak" discovery where his team found thousands of exposed API keys mere hours after a platform's popularity spiked. What's Inside: Agentic AI: Why 2026 will be the year AI starts taking action, not just chatting. Speed as a Weapon: How to shorten the time between a zero-day and a detection. Culture: The power of the "Table" and collaborative chaos. Retrospective: Lessons from IngressNightmare and the year in vulnerabilities. Resources: Read the DeepLeak Research: https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak Wiz Threat Research Hub: https://www.wiz.io/research

    24分
  5. Hacking Moltbook with Gal Nagli

    2月3日

    Hacking Moltbook with Gal Nagli

    🚨 Vibe coding meets critical data exposure: The Moltbook Hack. On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Gal Nagli to unpack how he compromised the "Facebook for AI Agents" in under an hour ↓ How a simple boolean manipulation (valid: false to true) bypassed authentication Cloud Database misconfigurations and the failure of Row Level Security (RLS) How Claude Code was used to identify and exploit the vulnerability The security reality of "Vibe Coding" and zero-manual-code applications

    13分
  6. CodeBreach: Hijacking the AWS Console with Yuval Avrahami

    1月15日

    CodeBreach: Hijacking the AWS Console with Yuval Avrahami

    🚨 Everything you need to know about CodeBreach with Yuval Avrahami On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Yuval Avrahami to unpack a major supply-chain flaw that put cloud environments at risk ↓ Misconfigured CodeBuild instances used by AWS themselves One small regex mistake, huge consequences How an SDK used by the AWS Console could have been hijacked (!) The CI/CD controls that can mitigate this risk

    17分
  7. React2Shell, Shai-Hulud 2.0, Gogs Zero-Day & Tika RCE

    1月1日

    React2Shell, Shai-Hulud 2.0, Gogs Zero-Day & Tika RCE

    🎙️ Shai-Hulud, Shai-Hulud 2.0, are you keeping up? In this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen go deep into real-world cloud security incidents ↓ How Shai-Hulud evolved into Shai-Hulud 2.0 A vulnerability affecting Apache Tika React2Shell and its implications Gogs zero-day explained You DONT want to miss this!This is a technical, concrete conversation focused on how attacks actually happen, how they evolve, and what defenders need to understand to keep up.

    20分
  8. Live Talk: Security Minds from Google Cloud, AWS & Wiz

    2025/12/08

    Live Talk: Security Minds from Google Cloud, AWS & Wiz

    🎙️ AI is changing the rules of cyber, are you keeping up?Eden Naftali goes live with leading voices in cloud security:Ryan Nolette (AWS), @John Miller (Google Cloud), and Alon Schindel (Wiz). This episode is essential listening for anyone defending at cloud scale. 👇🔍 Inside ↓1) How AI is supercharging attacker tactics — from hyper-variable phishing to rapid exploit generation2) The rise of "AI slop" and why it's burning analysts' time3) Emerging AI bug-hunters — what they can (and can't) do

    22分
すべて見る（61）

番組について

Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news. Hosted by experts Eden Naftali and Amitai Cohen, each episode provides in-depth coverage of the most important vulnerabilities and incidents from the previous month. Tune in for insightful analysis and expert recommendations to help you safeguard your cloud infrastructure.

情報

  • クリエイター
    Wiz
  • 配信期間
    23年 - 26年
  • エピソード
    61
  • 制限指定
    不適切な内容を含まない
  • Copyright
    © Wiz
  • 番組のWebサイト
    Crying Out Cloud

その他のおすすめ