Bug Bounty Secrets, Hacker Communities, and a Hit of Volleyball with Justin Gardner

Crying Out Cloud

35:02

The healing power of fitness goes far beyond physical benefits—for today’s guest, it’s a form of self-expression and a celebration of what the body can do. In this episode, host Nora McInerny sits down with fitness personality Ivylis Rivera, who shares her deeply personal journey of navigating life with Chronic Migraine while holding onto her passion for movement. Ivylis opens up about the struggle of staying active while facing the fear of triggering a headache or migraine attack and the resilience it takes to keep pushing forward—a resilience that carried her through the challenging journey of finding a Chronic Migraine treatment plan that worked for her. Join Nora and Ivylis as they explore the concept of “soft living,” a philosophy Ivylis embraces—staying active, listening to your body, and building trust in oneself. Click here for Product Information, including Boxed Warning and Medication Guide, or visit https://abbv.ie/prescribing_info See omnystudio.com/listener for privacy information.…

16 days ago 40:24

MP3•Episode home

🎙️ Listen to the biggest insights of bug bounty hunting with Justin Gardner 🚨

In this episode, Amitai Cohen and Eden Naftali are joined by none other than Justin, renowned bug bounty hunter and host of the Creative Thinking podcast (ctbbpodcast).

Justin unpacks some of today's 🔥 topics:

- Bug bounty disclosure challenges & trends

- Security stories from tech giants: lessons we can all learn

- Messaging platform exploits & SSRF risks

- Breaking into popular monitoring tools — HTTP pitfalls & key takeaways

44 episodes

#Tech #Wiz

Bug Bounty Secrets, Hacker Communities, and a Hit of Volleyball with Justin Gardner

Crying Out Cloud

published 16 days ago

MP3•Episode home

🎙️ Listen to the biggest insights of bug bounty hunting with Justin Gardner 🚨

In this episode, Amitai Cohen and Eden Naftali are joined by none other than Justin, renowned bug bounty hunter and host of the Creative Thinking podcast (ctbbpodcast).

Justin unpacks some of today's 🔥 topics:

- Bug bounty disclosure challenges & trends

- Security stories from tech giants: lessons we can all learn

- Messaging platform exploits & SSRF risks

- Breaking into popular monitoring tools — HTTP pitfalls & key takeaways

44 episodes

#Tech #Wiz

All episodes

1
UK Retail Breaches, SAP 0day, and CVE Troubles 29:05

10 days ago29:05

29:05

🎙️ All you need to know from Ransomware to CVE Programs!☁️ Join Amitai Cohen and Eden Naftali as they break down the top stories in the cloud:- UK Retail Sector Hit by Ransomware (DragonForce & Scattered Spider)- SAP NetWeaver Vulnerability Exploited in the Wild- CVE Program Faces Major Backlog and Trust Issues…

1
Bug Bounty Secrets, Hacker Communities, and a Hit of Volleyball with Justin Gardner 40:24

16 days ago40:24

40:24

🎙️ Listen to the biggest insights of bug bounty hunting with Justin Gardner 🚨 In this episode, Amitai Cohen and Eden Naftali are joined by none other than Justin , renowned bug bounty hunter and host of the Creative Thinking podcast (ctbbpodcast). Justin unpacks some of today's 🔥 topics: - Bug bounty disclosure challenges & trends - Security stories from tech giants: lessons we can all learn - Messaging platform exploits & SSRF risks - Breaking into popular monitoring tools — HTTP pitfalls & key takeaways…

1
Quadruple Supply Chain Attack, IngressNightmare Exploited, and Rumors Abound 28:47

6 weeks ago28:47

28:47

🎙️ All you need to know on the latest discoveries and updates ft. Rami McCarthy 🚨In this episode of Crying Out Cloud, @Amitai Cohen & @Eden Koby Naftali are joined by Rami — a Principal Security Researcher here at Wiz.Rami adds some energy and expertise to the table as we dive into a variety of topics:• GitHub Action supply chain attack • IngressNightmare updates. A follow-up to our last episode on this critical vulnerability.• Alleged Oracle breaches: Breaking down the latest rumors and insights.…

1
Ingress Nightmare: How a Single Request Could Take Over Your K8s Cluster 22:26

9 weeks ago22:26

22:26

🎙️ All you need to know on our latest discovery #IngressNightmare 🚨In this episode of Crying Out Cloud, Amitai Cohen & Eden Koby Naftali are joined by Nir Ohfeld — Head of Vulnerability Research at Wiz. Nir and his team have uncovered some of the most impactful vulnerabilities affecting cloud and SaaS applications. In this episode, he's diving into the latest discovery, a critical vulnerability in Ingress-NGINX:• How the team uncovered a critical unauthenticated RCE in NGINX Ingress Controller• Why Kubernetes admission controllers might be the next big attack surface• The wild journey of hunting vulnerabilities in the cloud…

1
From Hotmail Hacks to AI hype, CTFs & Cloud Guardian: with Ashish Rajan 21:56

11 weeks ago21:56

21:56

🎙 Ready for the latest on AI, cloud security, and Fortune 500 challenges?This week on our podcast Crying Out Cloud, we're joined by none other than Ashish Rajan— a seasoned cybersecurity leader and host of the AI Cybersecurity Podcast & Cloud Security Podcast.Amitai Cohen & Eden Koby Naftali dive into:- The evolution of AI & cloud security- Lessons from securing Fortune 500 & FTSE 100 companies- The biggest challenges (and laughs) in the industry…

1
HACKERS ARE HIJACKING CLOUD KEYS: The Rise of Cloud-Native Ransomware 23:21

13 weeks ago23:21

23:21

From Supply Chain Attacks to S3 Ransomware: Critical Cloud Security Stories You Need to Know. 🎙️ In this episode of Crying Out Cloud, Eden and Amitai break down the latest cloud security chaos, from sneaky supply chain attacks to AI-powered malware:1) How attackers exploited a GitHub misconfiguration to enable a supply chain attack.2) The latest twist on cloud-native extortion (spoiler: it all comes back to stolen cloud keys).3) NullifAI – Malicious AI models hiding in plain sight.4) whoAMI attack – The clever AWS AMI name confusion flaw that might catch you off guard.…

1
Norwegian Cloud Security, Open Source Tools, and Financial Sector Risks with Karim El-Melhaoui 21:58

15 weeks ago21:58

21:58

🎙️ SEASON PREMIERE ALERT: Tune in to our latest episode featuring Karim El-Melhaoui, where we dive into the latest cloud security challenges ☁️🔥 Amitai Cohen & Eden Koby Naftali are kicking off the season with:- Cyber risk vs. operational risk – Why cyber risk is harder to quantify and how Norges Bank used NIST's Cybersecurity Framework to strengthen resilience.- Open-source tools fuel innovation, but many are abandoned without long-term support.- How cloud security alliance Norway is setting stronger security standards.🎧 Ready for season 3 of #CryingOutCloud?…

1
DeepSeek Data Leak with Gal Nagli (Wiz Research) 11:02

16 weeks ago11:02

11:02

Why is everyone suddenly talking about DeepSeek? 👀 🎙️ If you've been seeing DeepSeek everywhere but are wondering what the actual buzz is about - this is for you: Our new podcast features Gal Nagli from the Wiz Research team, breaking it down with Eden Koby Naftali and Amitai Cohen. Plus: Get the full story behind our recent DeepSeek database discovery that made headlines ⚡…

1
Co-Founding Wiz, R&D and Security Leadership with Roy Reznik 32:15

22 weeks ago32:15

32:15

🎙️ Every great story starts with a beer in the Alps... From building #Adallom to becoming a sommelier — hear Roy Reznik's journey as Co-Founder and VP R&D at @wiz in our podcast season finale! In this episode Eden Koby Naftali & Amitai Cohen dive into: ☁️ Roy's journey from Tel Aviv to London—culture. 🛠️ How companies can scale fast while staying secure. 💡 How R&D should foster a culture where developers proactively embrace security as a core value. 🤖 Thoughts on AI in development — Co-Pilots: where do they excel?…

1
post:Invent with Scott Piper (re:Invent digest) 32:47

23 weeks ago32:47

32:47

🎙️ Unpack AWS re:Invent's top announcements, trends, and what's next for cloud practitioners with @Scott Piper! Join Eden Naftali and Amitai Cohen in our latest #CryingOutCloud episode featuring Scott Piper, Wiz's Principal Cloud Security Researcher and "cloud security historian". In this episode: 🌟 AWS re:Invent highlights: Aurora DSQL, Nova genAI, EKS Auto Mode 🔒 Security updates on RCPs, VPC Block Public Access, Declarative Policies for EC2 🎬 Scott's favorite cloud-themed movies from Wiz Video World (Pulp Encryption, anyone?)…

1
Red Team Tactics with EA’s Johann Rehberger 34:38

25 weeks ago34:38

34:38

Dive into the latest #CryingOutCloud episode featuring Johann Rehberger! Join Eden and Amitai as they sit down with Johann Rehberger, Red Team Director at @electronicarts and a cybersecurity expert. Johann also publishes innovative security research on his blog, Embrace the Red. What you'll learn: 📌 Red teaming strategies to strengthen security programs 📌 Insights from Johann’s cutting-edge AI security research and experience 📌 The funny story behind Johann’s alias, Wunderwuzzi Tune in now! 🎧…

1
Canadian Cybersecurity, Open Source Risks, and AppSec Insights with Tanya Janca 35:18

28 weeks ago35:18

35:18

🎙️ Tune in to the latest #CryingOutCloud episode featuring Tanya Janca, where we dive into all things cloud! Join Eden and Amitai as they welcome Tanya Janca, founder of 'We Hack Purple', and the author of 'Alice and Bob Learn Application Security'. She's seen it all—from launching AppSec programs to teaching secure coding and leading on education at Semgrep. In this episode: 🌐 Building security programs from scratch 🔍 The value of static analysis tools for developers 🇨🇦 The Canadian cybersecurity landscape and her take on global challenges 💡 Tips for securing AI applications in the age of generative AI…

1
Hybrid Cloud Attacks, Linux Malware, and LLMJacking Exposed 18:52

30 weeks ago18:52

18:52

🎙️ Ready for the latest on Hybrid Cloud Attacks, Linux Malware, and LLMJacking? Join our hosts Eden Koby Naftali and Amitai Cohen in our NEW #CryingOutCloud episode. In this episode: 📌 The perfctl malware campaign—stealthily mining crypto on thousands of Linux machines undetected for years 📌 Storm-0501 hybrid cloud attacks, targeting everything from hospitals to law enforcement, with ransomware and stolen admin credentials 📌 LLMJacking—the latest evolution in malicious cloud access, selling AI access on underground markets…

1
AI Toolkit Risks, CUPS Vulnerabilities, and Google's Infostealer Defenses 24:04

33 weeks ago24:04

24:04

🎙️ Catch the latest episode of #CryingOutCloud, where Amitai Cohen and Eden Koby Naftali tackle key cloud security challenges from AI Toolkit Risks to CUPS Vulnerabilities! Tune in to hear about: 📌 Wiz Research discovered a vulnerability affecting the Nvidia container toolkit 📌 Google's novel Info Stealers Mitigations 📌 All the talk around the CUPS vulnerabilities 📌 How to leverage Atomic Cloud IOCs [And so much more...]…

1
From NASA to GitLab: Democratizing Security, Open Source, and Empowering Women – With: Julie Davila 28:28

33 weeks ago28:28