Episode #191 - Cloud Build Vulnerable to Supply Chain Attacks; Cloud Shared Responsibility Model: Time for an (R)Evolution?; Microsoft Breach May Expose Deeper Problems; This Day, July 24, in Tech History
It's 5:05! Daily cybersecurity and open source briefing
Audio is streamed directly from the publisher (dts.podtrac.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/505-updates 📌
Cloud Build Vulnerable to Supply Chain Attacks
🇦🇺 Edwin Kwan, Sydney, Australia ↗
Security researchers have discovered a design flaw in Google Cloud Build, which can allow for supply chain attacks.
Cloud Shared Responsibility Model: Time for an (R)Evolution?
🇺🇸 Chris Hughes, Virginia Beach, Virginia ↗
This week, we have an update around the discussion of the Cloud Shared Responsibility Model. The past week and a half, we've seen a compromise with the Microsoft Azure Cloud environment, and we've seen an incident disclosed by Microsoft and CISA that has attributed to a Chinese threat actor named Storm-0558.
Microsoft Breach May Expose Deeper Problems
🇺🇸 Tracy (Trac) Bannon, Camp Hill, Pennsylvania↗
On July 12th, Redmond revealed that Chinese hackers had breached Exchange Online and Azure Active Directory by exploiting a zero-day validation flaw. Government agencies in the US and Western Europe were affected, including the US Department of State and the Commerce Department.
This Day, July 24, in Tech History
🇺🇸 Marcel Brown, St. Louis, Missouri ↗
July 23rd, 1903. Ford sells its first Model A car to Ernest Pfennig of Chicago, Illinois. This was Henry Ford's third attempt at creating a company that manufactured cars.