Crying Out Cloud

Episodes

• 
  Breaking Down PHP2Shell with Sagi Tzadik & Thai Duong 21.10.2026 36m

  🚨 How AI just broke PHP (and 70% of the internet).On this episode of Crying Out Cloud, Amitai Cohen sits down with Sagi Tzadik (Wiz Research) and Thai Duong (Calif) to unpack a massive PHP RCE vulnerability discovered entirely by AI agents.This isn't just another zero-day story. It's a look at the terrifying new reality of "agentic exploit development." What used to take human researchers months of tedious lab setups and debugging to weaponize a memory corruption bug took AI agents a couple of weeks, working while the researchers slept.What's Inside:- How an AI model looking for a Drupal bug accidentally found a foundational PHP flaw from 2004.- Why AI scaling exploit development across multiple software versions changes the threat landscape.- The massive logistical challenge of coordinating a patch for 70% of the web alongside distros, WAFs, and cloud providers.- How defenders can use these same AI agents to scale detection engineering.
• 
  AI-Powered Threat Actors, Poison Pills & Cyber Sabotage with John Hultquist 16.09.2026 24m

  On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with John Hultquist, Chief Analyst at Google Threat Intelligence Group (ex-Mandiant, ex-FireEye, founder of CYBERWARCON & SLEUTHCON).Drawing on over two decades of tracking state-sponsored adversaries like Sandworm, John cuts through the hype to explain what modern threat intelligence actually does: it keeps CISOs from burning millions of dollars on the wrong technology, spots adversary shifts before static IOCs exist, and bridges the gap between raw binary reverse-engineering and executive decision-making.In this episode, John unpacks how threat actors are weaponizing AI and bypassing commercial costs entirely and traces the real shift underway: adversaries embedding adversarial prompt-injection payloads inside malware to shut down automated SOC scanners.What's Inside:1. The economics of illicit AI: Underground access vs. hijacked enterprise compute2. Malware poison pills designed to neutralize automated LLM triage3. Why firmware and ICS layers are becoming primary targets for disruption4. Behavioral detection models when living-off-the-land means zero usable IOCs5. Lessons from tracking Sandworm and convincing leadership to act before the lights go out
• 
  Empowering Human Potential, AI in Cybersecurity & Scaling Operational Growth with Daniel Miessler 09.08.2026 28m

  AI is changing the security landscape, but are we automating the wrong things?On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Daniel Miessler to unpack why most companies are completely unprepared for the AI revolution. Daniel drops some heavy truths about what happens when we automate the "boring" parts of security, and why attackers are currently winning the AI arms race.What's Inside:- The "Gym Robot" analogy for operational toil and analyst training- Why attackers are moving 10X faster with AI than defenders- The TELOS framework and defining your security goals in text
• 
  WordPress RCE, GitHub vs TeamPCP & Why Meta Disabled Its Support Bot 02.08.2026 20m

  On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down to unpack the wildest cloud security news of the month: from AI chatbots going rogue to massive supply chain battles.What's Inside:- The WP2Shell vulnerability and why 60% of WordPress instances were at risk- GitHub's aggressive mitigations to combat TeamPCP's supply chain attacks- Why 20-year-old vulnerabilities like SquidBleed are suddenly being unearthed by AI- The Klue hack and the hidden dangers of over-privileged AI agents in Salesforce- How attackers bypassed Meta's security using VPNs, deepfakes, and a gullible AI support bot
• 
  Autonomous AI Malware, Threat Actor Startups & Beating Burnout with John Hammond 02.07.2026 29m

  AI-Powered Malware and the Future of Threat HuntingOn this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with John Hammond to unpack the reality of autonomous AI hacking and why cybercriminals are operating like Fortune 500 startups.1. Why modern ransomware groups have sales teams, HR, and go-to-market strategies.2. How autonomous AI agents are finding zero-days while researchers sleep.3. Glimpsing the future of non-deterministic, AI-driven command and control (C2) servers.4. Real talk on incident response burnout and why the "always-on" hustle is breaking defenders.
• 
  The Linux CopyFail Vulnerability & AI Bug Hunting with Xint 20.05.2026 50m

  The AI bug hunting revolution is here, and it just broke Linux.On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Tim Becker and Jacob Newman from Xint to unpack CopyFail, a powerful vulnerability found using autonomous AI agents.1. How Xint's custom LLM harness uncovered CopyFail, a privilege escalation bug affecting almost every Linux machine since 2017.2. The harsh reality of vulnerability disclosure in the AI era and why 90 days is too long when models can weaponize exploits instantly by patch-diffing.3. The evolution of AI agents in security, from the DARPA AI Cyber Challenge to Claude 3.5 Sonnet to Mythos.4. The importance of benchmarking in agentic workflows.
• 
  Hacking GitHub with a Semicolon & Claude with Sagi Tzadik 01.05.2026 13m

  Wiz researcher Sagi Tzadik joins us to break down how a single semicolon led to a critical Remote Code Execution (RCE) vulnerability in GitHub.For two years, Sagi sat on a lead. Reverse engineering GitHub's microservices manually was too tedious to justify the time. Then, AI agents arrived. By hooking Claude directly into his reverse engineering software, he condensed months of grueling binary analysis into 48 hours. The result? A critical bug in how GitHub handles git push options that exposed both SaaS and Enterprise environments. We get into the weeds on how different microservices interpreting the same input differently creates massive attack surfaces, and why security by obscurity is officially dead in the age of AI.What's Inside:- How combining Claude with the IDA MCP server dramatically sped up the reverse engineering process- The technical anatomy of the GitHub semicolon vulnerability.- Why microservice communication breakdowns lead to critical RCEs.- The massive difference in impact between GitHub.com and GitHub Enterprise Server.- Why Enterprise users need to patch their instances immediately.Resources:- Learn more about the findings at: https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854
• 
  Protecting Vibe Coded Apps and the Shift to "Soft Guardrails" with Igor Andriushchenko 24.02.2026 39m

  Igor Andriushchenko joins Crying Out Cloud to explain how vibe coding changes the role of security engineers. The shift from typing lines of code to shaping entire systems means security teams need new strategies. Developers expect their shipping velocity to increase tenfold with AI assistance. Relying on traditional hard deployment blocks will only cause friction. If you want to understand how to build secure guardrails for AI development without destroying developer momentum, this conversation covers the exact mechanics.What's Inside:The evolution of the Stockholm tech scene and human ambition driven by AI.How Lovable empowers non-developers to build disposable and deeply specific software.The concept of "soft guardrails" and why hard blocks fail in AI-assisted workflows.Future capabilities of AI pen testing using hundreds of autonomous agents.The shared responsibility model when business users build internal applications.
• 
  Neuroscience, AI Research & Hiring Swifties with Alon Schindel 12.02.2026 24m

  Agentic AI is coming. Are defenders ready?Alon Schindel, Director of Data & Threat Research at Wiz, joins Eden and Amitai for the Season 3 Finale. This isn't just a recap. It is a look at how top-tier research teams operate at speed. Alon explains why Wiz treats research as a "product" rather than a support function. He details the "DeepLeak" discovery where his team found thousands of exposed API keys mere hours after a platform's popularity spiked.What's Inside:Agentic AI: Why 2026 will be the year AI starts taking action, not just chatting.Speed as a Weapon: How to shorten the time between a zero-day and a detection.Culture: The power of the "Table" and collaborative chaos.Retrospective: Lessons from IngressNightmare and the year in vulnerabilities.Resources:Read the DeepLeak Research: https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leakWiz Threat Research Hub: https://www.wiz.io/research
• 
  Hacking Moltbook with Gal Nagli 03.02.2026 12m

  🚨 Vibe coding meets critical data exposure: The Moltbook Hack.On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Gal Nagli to unpack how he compromised the "Facebook for AI Agents" in under an hour ↓How a simple boolean manipulation (valid: false to true) bypassed authenticationCloud Database misconfigurations and the failure of Row Level Security (RLS)How Claude Code was used to identify and exploit the vulnerabilityThe security reality of "Vibe Coding" and zero-manual-code applications
• 
  CodeBreach: Hijacking the AWS Console with Yuval Avrahami 15.01.2026 17m

  🚨 Everything you need to know about CodeBreach with Yuval AvrahamiOn this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Yuval Avrahami to unpack a major supply-chain flaw that put cloud environments at risk ↓Misconfigured CodeBuild instances used by AWS themselvesOne small regex mistake, huge consequencesHow an SDK used by the AWS Console could have been hijacked (!)The CI/CD controls that can mitigate this risk
• 
  React2Shell, Shai-Hulud 2.0, Gogs Zero-Day & Tika RCE 01.01.2026 19m

  🎙️ Shai-Hulud, Shai-Hulud 2.0, are you keeping up?In this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen go deep into real-world cloud security incidents ↓How Shai-Hulud evolved into Shai-Hulud 2.0A vulnerability affecting Apache TikaReact2Shell and its implicationsGogs zero-day explainedYou DONT want to miss this!This is a technical, concrete conversation focused on how attacks actually happen, how they evolve, and what defenders need to understand to keep up.
• 
  Live Talk: Security Minds from Google Cloud, AWS & Wiz 08.12.2025 22m

  🎙️ AI is changing the rules of cyber, are you keeping up?Eden Naftali goes live with leading voices in cloud security:Ryan Nolette (AWS), @John Miller (Google Cloud), and Alon Schindel (Wiz). This episode is essential listening for anyone defending at cloud scale. 👇🔍 Inside ↓1) How AI is supercharging attacker tactics — from hyper-variable phishing to rapid exploit generation2) The rise of "AI slop" and why it's burning analysts' time3) Emerging AI bug-hunters — what they can (and can't) do
• 
  Cloud Detection Engineering, AI in the SOC and Parallel Parking with Alex Hurtado 14.11.2025 25m

  Detection engineering just got real!Eden Naftali and Amitai sit down with detection engineering powerhouse Alex Hurtado - and it's a must-listen for anyone in cloud security. 👇🔍 What's inside:The evolution of detection engineering in the cloud — and why traditional rules no longer applyWhy DIY detections > vendor defaultsHow AI is reshaping detection and threat hunting (and why the human in the loop still wins)
• 
  VSCode Extension Secrets, RediShell, & Living-off-the-LLM 07.11.2025 29m

  🔍 From discovering VS Code supply chain risks → to uncovering Redis Shell vulnerabilities.Eden Naftali and Amitai sat down to unpack: 👇How VS Code extensions became a critical supply chain risk (w/ Rami McCarthy)What RediShell reveals about attacker innovationWhere AI is being weaponized in modern malware🎙️ Listen now to our NEW Crying Out Cloud episode
• 
  eBPF, Fishy Book Covers, and Open Source Security with Liz Rice 16.09.2025 33m

  🚨 The kernel-level security revolution you can't ignore — a must-listen with Liz RiceEden Naftali and Amitai sit down with Liz Rice, Chief Open Source Officer at Isovalent (Cisco), and a global expert in eBPF, containers, and Kubernetes security.🎙️ In this episode:How eBPF is reshaping cloud security from the ground upPractical strategies to tackle open source supply chain attacks (a hot topic given today’s events)A must-listen for anyone building or securing cloud infrastructure in an era of AI coding and supply chain attacks.
• 
  Security Metrics, Detection & Response & Paintball with Erik Bloch 18.08.2025 28m

  🔐 Erik Bloch on his path from military hacker to Illumio security leader.Eden Naftali and Amitai sat down with Erik Bloch & here's what they covered 👇How starting in the military shaped Erik's approach to securityBuilding and scaling cloud detection & response teamsConverting security metrics into actionable business KPIs
• 
  Adversary Emulation, Cyber Education & Community Building with Day Johnson 01.08.2025 28m

  🚨 How do you build a 4,000+ strong student-tech community from scratch?Eden Naftali and Amitai sat down with Day Johnson, Security Engineer at  @amazon  , ex-Datadog, founder of CyberWox Academy.What they covered 👇- Detection engineering that works at scale- What breaks IR processes (and how to fix them)- Real talk on breaking into security without shortcutsAlso: why being the "tech kid" in your neighborhood might just launch your whole career.
• 
  Live Talk: Security Minds from Riot Games, Microsoft & Wiz 15.07.2025 39m

  💡 From cloud chaos to career confessions: live with security minds from RiotGames & Microsoft.Eden Naftali went live, and got personal, with 3 leaders shaping the future of cloud and cybersecurity:Nicole Dove, Head of Security Engineering at @Riot GamesSherrod DeGrippo, Director of Threat Intelligence Strategy at MicrosoftAlon Schindel, VP of AI & Threat Research at WizWhat they unpacked? 👇The heart of threat intel, building trust over tools, and how hobbies reflect how they lead.This Crying Out Cloud episode from RSA just hits different.⏱ Chapters00:05:02 – What it means to be a threat intelligence leader00:10:08 – How threat intelligence should really look00:15:48 – Skirting the tough questions in cybersecurity00:21:07 – Working with third-party vendors in the cloud00:26:17 – What the security industry is getting wrong00:31:20 – The special skill of deep research00:36:20 – A real-world story about leading with trust#CyberSecurity #CloudSecurity #ThreatIntelligence #Infosec #CloudComputing
• 
  AI Double Agents to Blame, Scattered Spider Pivots to Planes 09.07.2025 17m

  🎙️ Scattered Spider's new target? Airlines.Eden Koby Naftali & Amitai Cohen break down the latest in the cloud:1️⃣ A connectivity tool vuln & Open WebUI misconfig putting orgs at risk2️⃣ Why attackers are still tricking help desks (and how!)3️⃣ The "lethal trifecta" of AI agent danger, explained 🧠🤖0:25 – Scattered Spider targets the aviation industry1:38 – Help desk hacks: impersonation & real-world stories4:52 – Teleport vulnerability explained9:48 – AI’s “lethal trifecta” and why it matters#CloudSecurity #ScatteredSpider #AIThreats #HelpDeskAttacks #CryingOutCloud #CybersecurityPodcast