Skip to main content

Search TrendsNew Ads Appearances Podcasts API

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.

Crying Out Cloud

Crying Out Cloud

WordPress RCE, GitHub vs TeamPCP & Why Meta Disabled Its Support Bot

Aug 2, 2026 · 21 min · 7 segments

On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down to unpack the wildest cloud security news of the month: from AI chatbots going rogue to massive supply chain battles…

On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down to unpack the wildest cloud security news of the month: from AI chatbots going rogue to massive supply chain battles. What's Inside: \- The WP2Shell vulnerability and why 60% of WordPress instances were at risk \- GitHub's aggressive mitigations to combat TeamPCP's supply chain attacks \- Why 20-year-old vulnerabilities like SquidBleed are suddenly being unearthed by AI \- The Klue hack and the hidden dangers of over-privileged AI agents in Salesforce \- How attackers bypassed Meta's security using VPNs, deepfakes, and a gullible AI support bot

On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down to unpack the wildest cloud security news of the month: from AI chatbots going rogue to massive supply chain battles…

Speakers: Amitai CohenHostEden NaftaliHost

Show signals: SuitabilitySafeBiasNot politicalAudience≈26k followers

Spotify Apple Podcasts YouTube Amazon Music Website

Top entities: Microsoft×12 Meta×4 WordPress×13 Amitai Cohen×6 Instagram×4

WordPress Core RCE Vulnerabilities1:34 – 5:03

Eden NaftaliHost

1:34

Okay, so the first one, the vulnerabilities in WordPress.

Eden NaftaliHost

1:38

There were two, and they gave an unauthenticated actor full remote code execution on default WordPress installations, which is a really big deal and hits a very wide target audience.

Eden NaftaliHost

1:52

Can you tell us a little bit more about it?

Amitai CohenHost

1:54

So WordPress is super common.

Amitai CohenHost

1:57

People like to say that it powers like a huge percentage of the internet, which is probably true.

Amitai CohenHost

2:03

WordPress plugins are commonly targeted for exploitation.

Amitai CohenHost

2:07

They often have vulnerabilities.

Amitai CohenHost

2:08

They can be malicious.

Amitai CohenHost

2:10

There's all sorts of bad stuff going on there.

Amitai CohenHost

2:12

WordPress on its own is super secure and very rarely has significant vulnerabilities.

Amitai CohenHost

2:18

So any new RCE vulnerability in WordPress is going to make the news.

Amitai CohenHost

2:22

And it did.

Eden NaftaliHost

2:23

And like WizData show that 60% of organizations using WordPress have at least one vulnerable instance, which is mega.

Amitai CohenHost

2:31

Yeah.

Amitai CohenHost

2:33

And what's kind of important here is that WordPress is often auto-updated.

Amitai CohenHost

2:37

So these vulnerabilities were actually only introduced like a year ago.

Amitai CohenHost

2:42

So that kind of goes to show that people are patching them fast enough, which is a good thing.

Amitai CohenHost

2:46

But that also means that as new vulnerabilities are introduced, that means that you also pick them up.

Eden NaftaliHost

2:50

Yeah.

Amitai CohenHost

2:50

So like in this case...

Amitai CohenHost

2:52

If someone hadn't patched WordPress in a while, they would have actually been more secure.

Amitai CohenHost

2:56

But that isn't the lesson

Eden NaftaliHost

2:57

here.

Eden NaftaliHost

2:58

Don't take that as a takeaway.

Eden NaftaliHost

3:00

It's being exploited in the wild actively.

MicrosoftCompanyTechnology company
98%12 mentions
MetaCompanyTechnology company
95%4 mentions
WordPressSoftware ApplicationSystem software
91%13 mentions
Amitai CohenPerson
88%6 mentions
InstagramSoftware ApplicationSocial networking service
84%4 mentions
Artificial intelligenceEntityProfessional field
81%4 mentions
SalesforceCompanySoftware company
78%5 mentions
Multi-factor authenticationEntity
74%4 mentions
npmSoftware ApplicationSoftware
71%6 mentions
GitHubCompanyCompany
67%6 mentions
Meta AICompanyArtificial intelligence company
64%2 mentions
Generative pre-trained transformerEntity
60%2 mentions
OpenSSLSoftware ApplicationSoftware
57%3 mentions
CI/CDEntity
53%1 mention
HeartbleedEntity
50%1 mention
Software as a serviceEntity
47%3 mentions
Wiz, Inc.CompanyIT security company
43%2 mentions
GitHub ActionsEntitySoftware
40%3 mentions
FortiGateEntity
36%3 mentions
SquidSoftware ApplicationSoftware
33%2 mentions
GmailWebsiteWeb site
28%2 mentions
SlackSoftware ApplicationMobile application
28%2 mentions
Searchlight Cyber LLCCompanyCompany
22%1 mention
North KoreaCountryCountry in East Asia
19%1 mention
Assetnote Pty LtdCompanyCompany
16%1 mention
Web application firewallEntity
12%1 mention
BitwardenSoftware Application
9%1 mention
application programming interfaceEntityType of software
5%1 mention
United States Space ForceGovernment OrganizationArmed forces
2%1 mention

Data BreachesTechnology > Cybersecurity
CybersecurityTechnology
WordPressTechnology > Cybersecurity > Vulnerabilities
VulnerabilitiesTechnology > Cybersecurity
AI in SecurityTechnology > Cybersecurity
Social MediaTechnology > Cybersecurity > Account Security
Supply Chain AttacksTechnology > Cybersecurity
Vulnerability DiscoveryTechnology > Cybersecurity > AI in Security
Account SecurityTechnology > Cybersecurity
Technology
Third-Party IntegrationsTechnology > Cybersecurity > Data Breaches
Remote Code ExecutionTechnology > Cybersecurity > Vulnerabilities > WordPress
Team PCPTechnology > Cybersecurity > Supply Chain Attacks
MitigationsTechnology > Cybersecurity > Supply Chain Attacks > Team PCP
Automated SystemsTechnology > Cybersecurity > AI in Security > Vulnerability Discovery
Instagram HijackingTechnology > Cybersecurity > Account Security > Social Media
Access ControlTechnology > Cybersecurity > Data Breaches > Third-Party Integrations

WordPress Core RCE Vulnerabilities1:34 – 5:03

Eden NaftaliHost

1:34

Okay, so the first one, the vulnerabilities in WordPress.

Eden NaftaliHost

1:38

There were two, and they gave an unauthenticated actor full remote code execution on default WordPress installations, which is a really big deal and hits a very wide target audience.

Eden NaftaliHost

1:52

Can you tell us a little bit more about it?

Amitai CohenHost

1:54

So WordPress is super common.

Amitai CohenHost

1:57

People like to say that it powers like a huge percentage of the internet, which is probably true.

Amitai CohenHost

2:03

WordPress plugins are commonly targeted for exploitation.

Amitai CohenHost

2:07

They often have vulnerabilities.

Amitai CohenHost

2:08

They can be malicious.

Amitai CohenHost

2:10

There's all sorts of bad stuff going on there.

Amitai CohenHost

2:12

WordPress on its own is super secure and very rarely has significant vulnerabilities.

Amitai CohenHost

2:18

So any new RCE vulnerability in WordPress is going to make the news.

Amitai CohenHost

2:22

And it did.

Eden NaftaliHost

2:23

And like WizData show that 60% of organizations using WordPress have at least one vulnerable instance, which is mega.

Amitai CohenHost

2:31

Yeah.

Amitai CohenHost

2:33

And what's kind of important here is that WordPress is often auto-updated.

Amitai CohenHost

2:37

So these vulnerabilities were actually only introduced like a year ago.

Amitai CohenHost

2:42

So that kind of goes to show that people are patching them fast enough, which is a good thing.

Amitai CohenHost

2:46

But that also means that as new vulnerabilities are introduced, that means that you also pick them up.

Eden NaftaliHost

2:50

Yeah.

Amitai CohenHost

2:50

So like in this case...

Amitai CohenHost

2:52

If someone hadn't patched WordPress in a while, they would have actually been more secure.

Amitai CohenHost

2:56

But that isn't the lesson

Eden NaftaliHost

2:57

here.

Eden NaftaliHost

2:58

Don't take that as a takeaway.

Eden NaftaliHost

3:00

It's being exploited in the wild actively.

Sign up to see more

The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode

Create an account Already have an account? Log in

No account is needed to search Radar.