315: EC2's New Shutdown Shortcut: Because Sometimes You Just Need to Pull the Plug

Описание:  Welcome to episode 315 of The Cloud Pod, where the forecast is always cloudy! Your hosts, Justin and Matt, are here to bring you the latest in cloud and AI news, including news about AI from the White House, the newest hacker exploits, and news from CloudWatch, CrowdStrike, and GKE – plus so much more. Let’s get into it! 

Titles we almost went with this week:




• SharePoint and Tell: Government Secrets at Risk


• Zero-Day Hero: How Hackers Found SharePoint’s Achilles’ Heel


• Amazon Q Gets an F in Security Class


• Spark Joy: GitHub’s Marie Kondo Approach to App Development


• No Code? No Problem! GitHub Lights a Spark Under App Creation


• GKE Turns 10: Still Not Old Enough to Deploy Itself


• A Decade of Containers: Pokémon GO Caught Them All


• Kubernetes Engine Hits Double Digits, Still Can’t Count Past 9 Pods


• Account Names: The Missing Link in AWS Cost Optimization


• Flash Gordon Saves Your VMs from the Azure-verse


• The Flash: Fastest VM Monitor in the Multiverse


• Ctrl+AI+Delete: Rebooting America’s Artificial Intelligence Strategy


• The AImerican Dream: White House Plots Path to Silicon Supremacy


• CrowdStrike’s Year of Living Resiliently


• Kernel Panic at the Disco: A Recovery Story


• The Search is Over (But Your Copilot License Isn’t)


• Ground Control to Major Tom: You’re Fired


• GPU Booking.com: Reserve Your Neural Network’s Next Vacation


• Calendar Man Strikes Again: This Time He’s Scheduling Your TPUs


• AirBnB for AI: Short-Term Rentals for Your Machine Learning Models 


• Claude’s World Tour: Now Playing in Every Region


• Going Global: Claude Gets Its Passport Stamped on Vertex AI


• SQS Finally Learns to Share: No More Queue Hogging


• The Noisy Neighbor Gets Shushed: Amazon’s Fair Play for Queues


• CloudWatch Gets Its AI Degree in Observability


• Teaching Old Logs New Tricks: CloudWatch Goes GenAI


• The Agent Whisperer: CloudWatch’s New AI Monitoring Powers


• NotebookLM Gets Its PowerPoint License


• Slides, Camera, AI-ction: NotebookLM Goes Visual


• The SSL-ippery Slope: Azure’s Managed Certs Go Public or Go Home


• Breaking Bad Certificates: DigiCert’s New Rules Leave Some Apps High and Dry


• Firewall Rules: Now with a Rough Draft Feature


• Azure’s New Policy: Think Before You Deploy


General News 



00:50 Hackers exploiting a SharePoint zero-day are seen targeting government  (https://techcrunch.com/2025/07/21/hac...) agencies | TechCrunch (https://techcrunch.com/2025/07/21/hac...)




• Microsoft SharePoint servers are being actively exploited (https://techcrunch.com/2025/07/21/new...) through a zero-day (https://techcrunch.com/2025/04/25/tec...) vulnerability (CVE-2025-53770), with initial attacks primarily targeting government agencies, universities, and energy companies, according to security researchers.


• The vulnerability affects on-premises SharePoint installations only, not cloud versions, with researchers identifying 9,000-10,000 vulnerable instances accessible from the internet that require immediate patching or disconnection.


• Initial exploitation appears to be limited and targeted, suggesting that nation-states likely back advanced persistent threat (APT) actors. However, broader exploitation by other threat actors is expected as attack methods become public.


• Organizations running local SharePoint deployments face immediate risk as Microsoft has not yet released a complete patch, requiring manual mitigation steps outlined in their security guidance.


• This incident highlights the ongoing security challenges of maintaining on-premises infrastructure versus cloud services, where patches and security updates are managed centrally by the provider.


• It is interesting to us that the cloud was patched, but they didn’t have a patch right away. Strange situation. 


• From a security standpoint, if you are an Office 365 customer, you have SharePoint whether you want it or not. 




01:59 Justin – “If you’re still running SharePoint on-prem, my condolences.” 

AI Is Going Great – or How ML Makes Its Money 



05:25 The White House AI Action Plan:  a new chapter in U.S. AI policy (https://blog.cloudfla...