Tag: cloud security
420 articles
Microsoft Exposes 17.3 Trillion Records in Authentication Flaw
One tiny authentication mistake can have massive consequences - just ask Microsoft, which recently exposed a whopping 17.3 trillion records due to a flaw that let attackers bypass login credentials. A 16-year-old security researcher discovered the vulnerability, which could have let hackers pose as admins, but thankfully there's no evidence it was exploited.
AWS Credentials at Risk as Flaws in Amazon Bedrock AgentCore Expose Command Execution
A shocking vulnerability in Amazon Bedrock's AgentCore Python SDK could have put your AWS credentials at risk, allowing hackers to execute commands and access sensitive data. A simple crafted package name was all it took to bypass security measures and get commands running inside the Code Interpreter sandbox.
Identity Telemetry Bolsters Defense Against Escalating Threats
As organizations expand their cloud presence and connect with more external accounts, traditional identity controls - like periodic reviews and static role definitions - simply aren't enough to keep pace with escalating threats. A proactive approach requires continuous, real-time awareness that only a unified platform with identity governance and event-level telemetry can provide.
Kubernetes Operators Expose Hidden Security Risks
A recent discovery revealed that Kubernetes Operators, like IBM Turbonomic, can harbor hidden security risks, including granting excessive access to sensitive cluster data, putting administrative tokens and credentials at risk. Meet OperTraitor, an innovative, open-source tool that helps you uncover these threats by analyzing operator permissions and identifying potential security gaps.
Kiteworks Disrupts Operations on Intel from US Authorities
Kiteworks took a proactive stance against a potential threat, issuing a rare advisory that led to a nine-hour shutdown of its systems after receiving credible intel from US authorities about a possible targeted attack. The precautionary measure was lifted two days later, with the company allowing customers to resume operations.
Microsoft Warns of Azure Identity Hijacking in Destructive Cloud Attacks
In just 18 hours, a concentrated cloud assault on an Azure tenant combined lightning-fast reconnaissance, credential harvesting, and resource destruction - a stark warning of the devastating potential of Azure identity hijacking. Microsoft researchers uncovered the attack, linked to a notorious group known as Storm-3168, which used compromised service principals to wreak havoc.
Misconfigured Supabase Apps Expose Data in 16,000 Databases
Thousands of businesses are unknowingly leaking sensitive data due to misconfigured Supabase apps, with a staggering 16,000 databases exposed. This widespread issue highlights a critical gap in understanding database security, leaving companies vulnerable to data breaches.
JadePuffer AI Attacks Destroy Azure Cloud Resources
Meet JadePuffer, a new ransomware operator that's wreaking havoc on Azure Cloud Resources with its advanced AI-driven attacks, automating everything from reconnaissance to data encryption. Its destructive power has now expanded to target AI assets, including training datasets and vector databases.
Carbonato Botnet Exploits Docker Hosts to Deploy AI-Controlled Malware
Meet Carbonato, a sneaky botnet that's exploiting Docker hosts to spread AI-controlled malware, and learn how it uses a clever worm-like approach to propagate across networks. It starts by targeting Docker daemons left exposed without authentication, allowing it to install malware and create remote access.
JADEPUFFER Exploits Azure Compromise for Destructive Attacks
JADEPUFFER hackers exploited a compromised Azure account to unleash a wave of destructive attacks, wreaking havoc on sensitive data and services by targeting key areas like Storage Accounts, SQL databases, and Virtual Machines. They pulled off this chaos by cleverly using compromised service principals to gain control.
Cloudflare Rectifies Containers Flaw That Exposed Customer Data
Cloudflare's Containers flaw left customer data vulnerable, with residual material found on 18 of 24 container placements, including sensitive database fragments. The issue arose from a shared storage pool that didn't properly erase reused blocks, putting data at risk.
US Soldier Sentenced for Telecom Extortions
Meet Cameron John Wagenius, a 22-year-old US soldier who traded in his security clearance for a life of cybercrime, exploiting exposed Snowflake credentials to orchestrate a massive data heist. As Kiberphant0m, he and his co-conspirators downloaded sensitive data from major Snowflake customers, earning a guilty plea and a federal sentence.
Cloudflare Fixes Flaw Exposing Leftover Disk Data Between Containers
A startling security flaw was discovered in Cloudflare's container storage system, allowing leftover disk data to be exposed between containers, with researchers finding remnants on 18 of 24 production tests and 20 of 22 underlying machines worldwide. This vulnerability was caused by a misconfigured setting that reused disk blocks without properly wiping them clean.
Salesforce Vulnerabilities Expose CRM Data to Zero-Click Attacks
Meet SalesBleed, a trio of security flaws in Salesforce Agentforce that allowed hackers to hijack AI agents, steal sensitive CRM data, and send phishing messages - all without a single click. These vulnerabilities exposed the power of unchecked AI, as one expert warned: it's a lesson in what it takes to keep AI agents contained.
FedRAMP Overhauls Certification with Daily Vulnerability Scans
Get ready for a major shake-up in FedRAMP certification: by December 7, 2026, all cloud service offerings will be required to undergo daily vulnerability scans as part of the new Vulnerability Detection and Response rules.
Google Deploys AI Scanners to Bolster Critical Infrastructure Defenses
Google's new Scan for Good program is using AI hunters to supercharge defenses for critical infrastructure, uncovering massive vulnerabilities like an exposed administrator key that left 8.8 million files in a nationally significant archive open to read, write, and delete access. By pairing its Gemini 3.8 Flash Cyber model with Wiz's Red Agent, Google aims to proactively identify and fix public exposures and attack paths across vital public services and nonprofits.
Microsoft 365 Governance Gaps Expose Organizations to Risk
Most organizations think their Microsoft 365 environments are fine - until disaster strikes. But the truth is, hidden governance gaps are lurking, putting companies at risk, with 77% of global organizations experiencing at least one governance incident in the past year.
Agencies Flout CISA Cloud Security Directives, Heightening Cyber Risk
A recent report by the DHS Office of Inspector General found that a staggering 86% of federal agencies are failing to comply with cloud security directives, leaving them vulnerable to preventable cyberattacks. This widespread non-compliance puts the entire national cloud security posture at risk.
Kubernetes Flaw Exposes GCP Organizations to Privilege Escalation
Google downplays a Kubernetes flaw dubbed ConfigConfusion, which researchers say could allow privilege escalation in GCP organizations, as simply "working as designed" despite concerns from the security community. The issue arises from a handoff in authority between GitOps and Google Kubernetes Config Connector.
Z.ai Exposes User Code, Sparks Security Concerns
Z.ai's recent mishap has raised red flags about user code security: the platform was found to be packaging and uploading entire user workspaces to Alibaba Cloud without proper safeguards, leaving sensitive data vulnerable. Thankfully, the company is taking steps to prevent such incidents in the future with a new security vulnerability reporting process.
Microsoft Disrupts EvilTokens AI-Powered Phishing Service
Microsoft and its partners have successfully dismantled an AI-powered phishing service, known as EvilTokens, that had compromised over 12,000 email inboxes across 10,000 organizations worldwide. This court-authorized takedown marks a significant win in the fight against cybercrime.
AWS Wins NATO Approval to Handle Sensitive Alliance Data
Amazon Web Services has achieved a major milestone, earning NATO approval to handle sensitive RESTRICTED data across all member states, a testament to its robust security and compliance capabilities. This clearance marks a significant expansion of AWS's role in safeguarding critical alliance information.
AWS Neutralizes Compromised IAM Credentials with Managed Policy Updates
In a controlled test, AWS swiftly responded to a compromised access key by attaching a managed policy that quarantines the threat, all within 10 seconds of the key being publicly exposed on GitHub. By doing so, AWS effectively limited potential damage by denying access to certain high-risk actions.
Researchers Breach OpenAI Codex Sandbox, Execute Host Commands
Researchers have made a shocking discovery, finding not one, but two ways to break free from OpenAI's Codex sandbox, allowing code to run rampant on a developer's machine - even in its most locked-down mode. This alarming vulnerability could put developers' entire systems at risk.