CROC News: Malicious Repos, Bandwidth Theft, & NVD or NoVD?
Listen now
Description
🎙️ What is a better way to stay updated on cloud security than a NEW Crying Out Cloud episode! Join Eden Naftali and Amitai Cohen as they explore what is new and 🔥: 👾 Open-source repos flooded by malicious code. 💻 What is to become of the National Vulnerability Database? ⛓️ Proof of bandwidth cryptojacking 🛠️ Critical vulnerabilities discovered in popular CI/CD tool Links:   https://apiiro.com/blog/malicious-code-campaign-github-repo-confusion-attack/  https://github.blog/2024-02-29-keeping-secrets-out-of-public-repositories/  https://research.openanalysis.net/github/lua/2024/03/03/lua-malware.html  https://resilientcyber.substack.com/p/death-knell-of-the-nvd  https://sysdig.com/blog/cloud-threats-deploying-crypto-cdn/ 
More Episodes
🚨 BREAKING: Wiz Research identifies critical risks in #AI-as-a-service 🚨 Dive into Crying Out Cloud's latest episode, featuring a very special guest, Shir Tamari, head of the research team at Wiz. This episode sheds light on the security challenges that come with the rapid integration of AI...
Published 04/04/24
Published 04/04/24
The backdoor in XZ Utils is shaking the industry 🔔 How could we not talk about it? Tune in to the special unscheduled episode of Crying Out Cloud with Eden Naftali and Amitai Cohen as they delve into the stealthy supply chain attack! In this episode: 🔍 The Alert from CISA regarding...
Published 03/31/24