Topic

Cloud Infrastructure: news, advisories and analysis

9 articlesUpdated 18 Oct 2026

CyberSecureToday covers Cloud Infrastructure across 9 articles published between 16 Sep 2026 and 18 Oct 2026. The coverage includes 8 vulnerability advisories and 1 analysis or guidance piece. 8 advisories are rated critical or high severity.

Stories on Cloud Infrastructure most often intersect with AWS, Amazon Web Services and iperf3, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Critical SQL Injection in IBM Cloud Portal Infrastructure Allowed Database Exfiltration”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Critical SQL Injection in IBM Cloud Portal Infrastructure Allowed Database Exfiltration
A critical SQL injection flaw on an enterprise IBM Cloud portal enabled unauthenticated remote attackers to extract backend database records.
Daniel Okafor18 Oct 202613 min read
ThreatsCloud & SaaSCritical
Yii2 Starter Kit Exposes Gii and Debug Modules to Remote Code Execution
A critical security flaw in yii2-starter-kit exposes the Gii code generator and debug modules to all remote IP addresses by default, allowing unauthenticated RCE.
CST Editorial Desk1 Oct 20268 min read
ThreatsCloud & SaaSCritical
LiteSpeed Web Server Redirect Validation Flaw Exposes Virtual Hosts to Unauthorized Access
A critical URL validation defect in LiteSpeed Web Server before v6.3.7 build 1 permits remote actors to bypass rewrite rules and access internal handlers.
CST Editorial Desk1 Oct 202612 min read
ThreatsCloud & SaaSCritical
ESnet iperf3 RSA Authtoken Pre-Authentication Heap Buffer Overflow Flaw Uncovered (CVE-2026-101283)
A pre-authentication heap buffer overflow in ESnet iperf3 v3.20–3.21 allows unauthenticated remote attackers to corrupt heap memory via oversized RSA tokens.
CST Editorial Desk1 Oct 202611 min read
ThreatsCloud & SaaSCritical
ESnet iperf3 Server Watchdog Race Condition Enables Remote Heap Use-After-Free Exploitation (CVE-2026-101276)
A critical heap use-after-free vulnerability in ESnet iperf3 v3.21 allows unauthenticated remote attackers to crash network test daemons or execute code.
Priya Raman1 Oct 202611 min read
ThreatsCloud & SaaSHigh
Amazon ECS Container Agent Flaw Enables Task Boundary Breakout and IAM Role Credential Hijacking
AWS resolves a container boundary escape flaw in Amazon ECS Container Agent that allowed unprivileged containers to intercept task metadata and assume host IAM roles.
Aisha Noor25 Sep 202617 min read
ThreatsCloud & SaaSHigh
Amazon Ion-C Library Recursion Flaw Triggers Cloud Service Stack Exhaustion Crashes CVE-2026-84851
AWS publishes Bulletin 2026-094-AWS for high-severity flaw CVE-2026-84851 in Amazon Ion-C library, allowing attackers to exhaust stack memory and crash services.
CST Editorial Desk24 Sep 202615 min read
ThreatsCloud & SaaSHigh
AWS Security Advisory: Linux Kernel vhost vring Cache Corruption Flaw CVE-2026-74580 Patched via Livepatch
AWS publishes security advisory ALAS2023LIVEPATCH-2026-343 addressing a Linux kernel vhost vring metadata cache corruption vulnerability (CVE-2026-74580).
Daniel Okafor17 Sep 202613 min read
InsightsCloud & SaaS
Cloud Workload Security: BOSH Azure & AWS Microservice Stemcell Privilege Escalation Analysis
Technical breakdown of cloud workload stemcell isolation defects, container escape vectors, and hypervisor boundary hardening across AWS and Microsoft Azure.
Mei-Lin Chen16 Sep 202612 min read