--- title: "A Bunch of Vulnerabilities is Called an Embarrassment" id: "13515" type: "podcast" slug: "a-bunch-of-vulnerabilities-is-called-an-embarrassment" published_at: "2022-12-22T12:00:00+00:00" modified_at: "2026-08-20T05:30:18+00:00" url: "https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/a-bunch-of-vulnerabilities-is-called-an-embarrassment/" markdown_url: "https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/a-bunch-of-vulnerabilities-is-called-an-embarrassment.md" taxonomy_shows: - "Last Week In AWS Podcast" --- About the Author Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure. [https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305](https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305) [https://overcast.fm/itunes1466344305/aws-morning-brief](https://overcast.fm/itunes1466344305/aws-morning-brief) [https://pca.st/AKs0](https://pca.st/AKs0) [https://podcastaddict.com/podcast/2382583](https://podcastaddict.com/podcast/2382583) [https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU](https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU) [https://feeds.transistor.fm/aws-morning-brief](https://feeds.transistor.fm/aws-morning-brief) ## Episode Summary Last week in security news: A post from Azure's VP of Security Engineering, LastPass has (yet again) suffered a breach, a reported ECR Public Gallery Issue, and more! ## Episode Show Notes & Transcript **Links:** - Azure's VP of Security Engineering published [a post](https://azure.microsoft.com/en-us/blog/microsoft-azures-defense-in-depth-approach-to-cloud-vulnerabilities/) describing their approach to cloud vulnerabilities - Panther deployed Yubikeys internally and [blogged about it](https://panther.com/blog/going-phishless-how-panther-deployed-webauthn/) . - LastPass has (yet again) suffered a breach, and published a no-content advisory that [TechCrunch took the time to parse through](https://techcrunch.com/2022/12/14/parsing-lastpass-august-data-breach-notice/?guccounter=1) . - Apparently Wiz decided to [poke around a bit](https://www.csoonline.com/article/3681450/researchers-found-security-pitfalls-in-ibm-s-cloud-infrastructure.html) into IBM "Cloud" and found a bunch of security issues. - [Prepare for consolidated controls view and consolidated control findings in AWS Security Hub](https://aws.amazon.com/blogs/security/prepare-for-consolidated-controls-view-and-consolidated-control-findings-in-aws-security-hub/) - [Reported ECR Public Gallery Issue](https://aws.amazon.com/security/security-bulletins/AWS-2022-010/) - From the world of tools: [osquery](https://github.com/osquery/osquery) turns your operating system into a database View Full Transcript Hide Full Transcript ## You might also like [More Podcast Episodes](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/) ### [The Cost of Prime Day](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-cost-of-prime-day/) Last Week In AWS Podcast 10.12.2026 5 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-cost-of-prime-day/) ### [Your Database Is a Data Lake Now, Apparently](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/your-database-is-a-data-lake-now-apparently/) Last Week In AWS Podcast 10.05.2026 6 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/your-database-is-a-data-lake-now-apparently/) ### [The Week AWS Was Wrong, Not Broken](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-week-aws-was-wrong-not-broken/) Last Week In AWS Podcast 09.28.2026 6 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-week-aws-was-wrong-not-broken/)