KubernetesAddressing protocol security gaps in multi-tenant Kubernetes
InsightsCloud & SaaS
Technical architectural analysis of Addressing cloud workload protection, IAM integrity controls, and enterprise boundary defense.
Aisha Noor11 min read
Topic
Cloud Security: news, advisories and analysis, page 2
131 articles
Coverage, page 2
Kubernetes
AppleApple Multiple Products Authentication Bypass Flaw Exploited in Active Attacks (CVE-2024-27834)
ThreatsCloud & SaaSCVE-2024-27834ExploitedKEV
CVE-2024-27834 in Apple Multiple Products (Authentication Bypass) allows remote attackers to trigger active system exploitation. Patch: Vendor security pat
CST Editorial Desk10 min read
Deep DiveSecurity Audit Uncovers 26,400 Live Cloud and Enterprise AI API Keys Exposed in Public Gitee Repositories
ResearchCloud & SaaS
A comprehensive security scan of 7.25 million public Gitee repositories revealed 26,400 verified, live credentials, including Alibaba Cloud and OpenAI keys.
Aisha Noor11 min read
Active ExploitIvanti Connect Secure Vulnerability Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-111357ExploitedKEV
CVE-2026-111357 in Ivanti Connect Secure (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security pat
CST Editorial Desk10 min read
Active ExploitIvanti Connect Secure Input Validation Flaw Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-118527ExploitedKEV
CVE-2026-118527 in Ivanti Connect Secure (Input Validation) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch rel
CST Editorial Desk10 min read
CiscoCisco Secure Firewall ASA Software and Cisco Secure FTD Software Vulnerability Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-76418ExploitedKEV
CVE-2026-76418 in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (Security Vulnerability) allows remote attackers to trigger active syste
CST Editorial Desk10 min read
VMware ESXiBroadcom VMware ESX Vulnerability Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-41709ExploitedKEV
CVE-2026-41709 in Broadcom VMware ESX (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch
CST Editorial Desk10 min read
GoogleGoogle Brotli Vulnerability Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-111497ExploitedKEV
CVE-2026-111497 in Google Brotli (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Version 1.2.0.
CST Editorial Desk10 min read
Active ExploitAdobe Commerce and Magento Unrestricted File Upload Flaw Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-48356ExploitedKEV
CVE-2026-48356 in Adobe Commerce and Magento (Unrestricted File Upload) allows remote attackers to trigger active system exploitation. Patch: Vendor securi
CST Editorial Desk10 min read
Active ExploitCollabora Online – Built-in CODE Server OS Command Injection Flaw Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-110447ExploitedKEV
CVE-2026-110447 in Collabora Online – Built-in CODE Server (OS Command Injection) allows remote attackers to trigger active system exploitation. Patch: Ver
CST Editorial Desk10 min read
OT / SCADASiemens Software Center Vulnerability Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-110936ExploitedKEV
CVE-2026-110936 in Siemens Software Center (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security p
CST Editorial Desk10 min read
LinuxSingCERT Issues Critical Alert as CARBONATO Botnet Exploits Exposed Docker Remote APIs Across Cloud Workloads
ThreatsCloud & SaaSHigh
SingCERT issues an urgent warning as the CARBONATO botnet actively scans Singapore cloud subnets, hijacking exposed unauthenticated Docker Remote APIs for container escapes.
Aisha Noor13 min read
Active ExploitPlex Media Server Server-Side Request Forgery Flaw Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-96655ExploitedKEV
CVE-2026-96655 in Plex Media Server (Server-Side Request Forgery) allows remote attackers to trigger active system exploitation. Patch: Version 1.43.3.1086
CST Editorial Desk10 min read
Active ExploitPlex Media Server Input Validation Flaw Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-96654ExploitedKEV
CVE-2026-96654 in Plex Media Server (Input Validation) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch release.
CST Editorial Desk10 min read
Active ExploitEG Secure Solutions SiteGuard Server Edition OS Command Injection Flaw Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-106931ExploitedKEV
CVE-2026-106931 in EG Secure Solutions SiteGuard Server Edition (OS Command Injection) allows remote attackers to trigger active system exploitation. Patch
CST Editorial Desk10 min read
Active ExploitPlex Media Server Vulnerability Exploited in Wild Attacks
ThreatsCloud & SaaSCVE-2026-96656ExploitedKEV
CVE-2026-96656 in Plex Media Server (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Version 1.43.3.10861 and
CST Editorial Desk10 min read
AWS CloudAWS Amplify CLI Prototype Pollution Flaw in Velocity Template Engine Enabled Local Code Execution
ThreatsCloud & SaaSHigh
A prototype chain traversal flaw in AWS Amplify's velocity template engine allowed attackers with malicious VTL files to execute arbitrary local commands.
Aisha Noor14 min read
MicrosoftConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants
Cyber AttackCloud & SaaSExploited
A compromised vendor credential in ConnectWise Cloud Backup allowed threat actors to abuse OAuth application tokens across hundreds of Microsoft 365 customer tenants.
Aisha Noor10 min read
MicrosoftMicrosoft Patches Maximum-Severity CVSS 10.0 Privilege Escalation Flaw CVE-2026-96207 in Partner Center Cloud Service
ThreatsCloud & SaaSCVE-2026-96207Critical
Microsoft resolves a maximum-severity privilege escalation flaw (CVE-2026-96207, CVSS 10.0) in Partner Center that exposed delegated customer tenants to unauthorized administrative control.
CST Editorial Desk8 min read
Threat IntelMage OSS Critical Authentication Bypass Flaw CVE-2026-111823 Exposes Enterprise ETL Data Pipelines to Remote Takeover
ThreatsCloud & SaaSCVE-2026-111823Critical
A critical vulnerability in Mage OSS (CVE-2026-111823, CVSS 9.8) enables unauthenticated attackers to forge OAuth sessions and seize administrative control of cloud data pipelines.
CST Editorial Desk9 min read
Data BreachRBI Cyber Security Framework Mandates 6-Hour Breach Reporting and Cloud Audits
InsightsBanking & Fintech
The Reserve Bank of India enforces updated CSFB directives mandating 6-hour breach disclosure to CERT-In, third-party cloud audits, and zero-trust banking security.
Priya Raman9 min read
AWS CloudAWS Systems Manager (SSM) Agent OS Command Injection Flaw CVE-2026-87911 Patched
ThreatsCloud & SaaSCVE-2026-87911High
AWS resolves a high-severity OS command injection flaw in AWS Systems Manager Agent (CVE-2026-87911) affecting multi-step Run Command document execution.
CST Editorial Desk8 min read
GoogleGoogle Cloud Workload Identity Federation OIDC Token Bypass Flaw CVE-2026-19410 Remediated
ThreatsCloud & SaaSCVE-2026-19410High
Google Cloud updates authentication libraries for CVE-2026-19410 where improper audience validation allowed external OIDC tokens to impersonate IAM service accounts.
Aisha Noor8 min read
AWS CloudAWS IAM Identity Center Flaw Left Revoked Session Tokens Active
ThreatsCloud & SaaSCVE-2026-82856High
AWS resolves an access control flaw in IAM Identity Center and AWS CLI session handling (CVE-2026-82856) where revoked STS tokens remained temporarily active.
CST Editorial Desk8 min read