Crying Out Cloud

Wiz

Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news. Hosted by experts Eden Naftali and Amitai Cohen, each episode provides in-depth coverage of the most important vulnerabilities and incidents from the previous month. Tune in for insightful analysis and expert recommendations to help you safeguard your cloud infrastructure.

  1. Neuroscience, AI Research & Hiring Swifties with Alon Schindel

    12. FEB.

    Neuroscience, AI Research & Hiring Swifties with Alon Schindel

    Agentic AI is coming. Are defenders ready? Alon Schindel, Director of Data & Threat Research at Wiz, joins Eden and Amitai for the Season 3 Finale. This isn't just a recap. It is a look at how top-tier research teams operate at speed. Alon explains why Wiz treats research as a "product" rather than a support function. He details the "DeepLeak" discovery where his team found thousands of exposed API keys mere hours after a platform's popularity spiked. What's Inside: Agentic AI: Why 2026 will be the year AI starts taking action, not just chatting. Speed as a Weapon: How to shorten the time between a zero-day and a detection. Culture: The power of the "Table" and collaborative chaos. Retrospective: Lessons from IngressNightmare and the year in vulnerabilities. Resources: Read the DeepLeak Research: https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak Wiz Threat Research Hub: https://www.wiz.io/research

    24 Min.
  2. Hacking Moltbook with Gal Nagli

    3. FEB.

    Hacking Moltbook with Gal Nagli

    🚨 Vibe coding meets critical data exposure: The Moltbook Hack. On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Gal Nagli to unpack how he compromised the "Facebook for AI Agents" in under an hour ↓ How a simple boolean manipulation (valid: false to true) bypassed authentication Cloud Database misconfigurations and the failure of Row Level Security (RLS) How Claude Code was used to identify and exploit the vulnerability The security reality of "Vibe Coding" and zero-manual-code applications

    13 Min.
  3. CodeBreach: Hijacking the AWS Console with Yuval Avrahami

    15. JAN.

    CodeBreach: Hijacking the AWS Console with Yuval Avrahami

    🚨 Everything you need to know about CodeBreach with Yuval Avrahami On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Yuval Avrahami to unpack a major supply-chain flaw that put cloud environments at risk ↓ Misconfigured CodeBuild instances used by AWS themselves One small regex mistake, huge consequences How an SDK used by the AWS Console could have been hijacked (!) The CI/CD controls that can mitigate this risk

    17 Min.
  4. React2Shell, Shai-Hulud 2.0, Gogs Zero-Day & Tika RCE

    1. JAN.

    React2Shell, Shai-Hulud 2.0, Gogs Zero-Day & Tika RCE

    🎙️ Shai-Hulud, Shai-Hulud 2.0, are you keeping up? In this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen go deep into real-world cloud security incidents ↓ How Shai-Hulud evolved into Shai-Hulud 2.0 A vulnerability affecting Apache Tika React2Shell and its implications Gogs zero-day explained You DONT want to miss this!This is a technical, concrete conversation focused on how attacks actually happen, how they evolve, and what defenders need to understand to keep up.

    20 Min.
  5. Live Talk: Security Minds from Google Cloud, AWS & Wiz

    08.12.2025

    Live Talk: Security Minds from Google Cloud, AWS & Wiz

    🎙️ AI is changing the rules of cyber, are you keeping up?Eden Naftali goes live with leading voices in cloud security:Ryan Nolette (AWS), @John Miller (Google Cloud), and Alon Schindel (Wiz). This episode is essential listening for anyone defending at cloud scale. 👇🔍 Inside ↓1) How AI is supercharging attacker tactics — from hyper-variable phishing to rapid exploit generation2) The rise of "AI slop" and why it's burning analysts' time3) Emerging AI bug-hunters — what they can (and can't) do

    22 Min.
  6. Cloud Detection Engineering, AI in the SOC and Parallel Parking with Alex Hurtado

    14.11.2025

    Cloud Detection Engineering, AI in the SOC and Parallel Parking with Alex Hurtado

    Detection engineering just got real!Eden Naftali and Amitai sit down with detection engineering powerhouse Alex Hurtado - and it's a must-listen for anyone in cloud security. 👇 🔍 What's inside: The evolution of detection engineering in the cloud — and why traditional rules no longer apply Why DIY detections > vendor defaults How AI is reshaping detection and threat hunting (and why the human in the loop still wins)

    26 Min.
  7. VSCode Extension Secrets, RediShell, & Living-off-the-LLM

    07.11.2025

    VSCode Extension Secrets, RediShell, & Living-off-the-LLM

    🔍 From discovering VS Code supply chain risks → to uncovering Redis Shell vulnerabilities. Eden Naftali and Amitai sat down to unpack: 👇 How VS Code extensions became a critical supply chain risk (w/ Rami McCarthy) What RediShell reveals about attacker innovation Where AI is being weaponized in modern malware 🎙️ Listen now to our NEW Crying Out Cloud episode

    30 Min.
  8. eBPF, Fishy Book Covers, and Open Source Security with Liz Rice

    16.09.2025

    eBPF, Fishy Book Covers, and Open Source Security with Liz Rice

    🚨 The kernel-level security revolution you can't ignore — a must-listen with Liz Rice Eden Naftali and Amitai sit down with Liz Rice, Chief Open Source Officer at Isovalent (Cisco), and a global expert in eBPF, containers, and Kubernetes security. 🎙️ In this episode: How eBPF is reshaping cloud security from the ground up Practical strategies to tackle open source supply chain attacks (a hot topic given today’s events) A must-listen for anyone building or securing cloud infrastructure in an era of AI coding and supply chain attacks.

    33 Min.
Alle anzeigen (58)

Info

Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news. Hosted by experts Eden Naftali and Amitai Cohen, each episode provides in-depth coverage of the most important vulnerabilities and incidents from the previous month. Tune in for insightful analysis and expert recommendations to help you safeguard your cloud infrastructure.

Informationen

  • Erstellt von
    Wiz
  • Jahre aktiv
    2023 - 2026
  • Folgen
    58
  • Bewertung
    Unbedenklich
  • Copyright
    © Wiz
  • Sendungswebsite
    Crying Out Cloud

Das gefällt dir vielleicht auch