
Topic
Cloud Security, page 2
News, analysis and practical guidance on Cloud Security.
48 articles
ThreatsCloud & SaaSHighPriya Raman
ThreatsCloud & SaaSHighAmazon Bedrock AgentCore Flaw Allows Attackers to Bypass LLM Guardrails via Injected Tool-Use Payloads
Daniel Okafor
ThreatsCloud & SaaSHighAzure Kubernetes Service Container Path Traversal Flaw Enables Node Escape and Code Execution
Priya Raman
ThreatsCloud & SaaSCriticalMicrosoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution
Daniel Okafor
ThreatsCloud & SaaSHighAWS Discloses Security Policy Bypass in API Model Context Protocol Server Enabling Unauthorized Agent Tool Execution
Daniel Okafor
ThreatsCloud & SaaSHighAWS Discloses Command Injection Flaw in projen Tooling Enabling CI/CD Runner Takeover
Daniel Okafor
ThreatsCloud & SaaSCriticalSiemens Mendix SAML Single Sign-On Flaw Exposes Enterprise Cloud Portals to Account Takeover
Priya Raman
ThreatsCloud & SaaSHighAWS Patches Hostname Validation Bypass in IoT Device SDK Exposing Core Endpoints to AiTM Attacks
Daniel Okafor
ThreatsCloud & SaaSHighLinux Kernel In-Kernel TLS Receive Path Flaw Weaponized in Active Multi-Tenant Cloud Attacks
CST Newsroom
ThreatsCloud & SaaSCriticalPublic Exploits Released for Four Linux Kernel Flaws Enabling Local Root and Container Compromise
CST Newsroom
ThreatsCloud & SaaSCriticalAmazon EKS Network Policy Agent Flaw Allows Pod Isolation Bypass Across Kubernetes Clusters
Daniel Okafor
InsightsCloud & SaaSAWS Resolves Privilege Escalation Flaw in IAM Identity Center Temporary Elevated Access
Aisha Noor
InsightsCloud & SaaSMicrosoft Resolves CVSS 10.0 Azure AI Foundry Authentication Bypass and Privilege Escalation Flaw
Aisha Noor
InsightsCloud & SaaSAzure Security Advisory: Cloud Foundry BOSH CPI Stemcell Code Injection Flaw Dissected
Mei-Lin Chen
ThreatsCloud & SaaSHighLinux Kernel Watch Queue Privilege Escalation Flaw CVE-2022-0995 Weaponized in Cloud Attacks
Mei-Lin Chen
InsightsCloud & SaaSGoogle Cloud GKE Workload Identity Privilege Escalation: Cloud Threat Forensics & Hardening
Mei-Lin Chen
InsightsCloud & SaaSSurge in SEC Form 8-K Cyber Filings: Cloud Storage Exfiltration & Extortion Forensics
Priya Raman
ThreatsCloud & SaaSCriticalMLflow Open-Source AI Platform SSRF Flaw Weaponized to Exfiltrate Cloud Credentials
Priya Raman
ThreatsCloud & SaaSCriticalownCloud Critical Authentication Bypass Flaw Under Active Exploitation
Aisha Noor
ThreatsCloud & SaaSCriticalThreat actors actively exploit Langflow AI orchestration flaws to steal cloud API keys and deploy miners
Priya Raman
NewsHealthcare & PharmaIDScan.net says customer information in cloud accounts may have been accessed
Priya Raman
ThreatsBanking & FintechHighSlim Spider Targets Brazilian Instant Payments (Pix) and Crypto Custody Infrastructure
Daniel Okafor