Crying out Cloud – Our Favorite Stories of 2023

This blog/podcast recap highlights major cloud security events of 2023, including client- and library-level vulnerabilities initially tied to Chrome, the MOVEit Transfer zero-days exploited by Cl0p that led to widespread data theft, supply-chain compromises affecting CircleCI and Okta, ransomware actors (Scattered-Spider, ALPHV) moving into cloud targeting and lateral movement, Microsoft’s Storm-0558 signing-key compromise by a likely nation-state actor, and risks to AI model integrity via data poisoning—concluding with interviews and lessons learned for cloud defenders.