Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Topic

Cloud Security, page 2

News, analysis and practical guidance on Cloud Security.

48 articlesUpdated 28 Sep 2026Page 2 of 2

ThreatsCloud & SaaSHigh
OpenSearch Dashboards Route Handler Flaw Triggers Denial of Service Across Cloud Clusters
AWS and OpenSearch release security advisories for high-severity vulnerability CVE-2026-75897 in OpenSearch Dashboards enabling unauthenticated remote denial of service.
Priya Raman19 Sep 202610 min read
ThreatsCloud & SaaSHigh
Amazon Bedrock AgentCore Flaw Allows Attackers to Bypass LLM Guardrails via Injected Tool-Use Payloads
AWS resolves high-severity vulnerability CVE-2026-18830 in Amazon Bedrock AgentCore allowing attackers to bypass LLM safety guardrails and trigger arbitrary tool calls.
Daniel Okafor19 Sep 202611 min read
ThreatsCloud & SaaSHigh
Azure Kubernetes Service Container Path Traversal Flaw Enables Node Escape and Code Execution
Microsoft patches high-severity vulnerability CVE-2026-32193 in Azure Kubernetes Service allowing container workloads to escape sandboxes via path traversal.
Priya Raman19 Sep 202611 min read
ThreatsCloud & SaaSCritical
Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution
Microsoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-69836 in Entra ID allowing unauthenticated remote code execution via unsafe object deserialization.
Daniel Okafor19 Sep 202612 min read
ThreatsCloud & SaaSHigh
AWS Discloses Security Policy Bypass in API Model Context Protocol Server Enabling Unauthorized Agent Tool Execution
AWS Labs resolves high-severity vulnerability CVE-2026-16584 in AWS API MCP Server allowing autonomous AI agent workflows to bypass security policies upon initialization failure.
Daniel Okafor19 Sep 202611 min read
ThreatsCloud & SaaSHigh
AWS Discloses Command Injection Flaw in projen Tooling Enabling CI/CD Runner Takeover
AWS resolves high-severity vulnerabilities CVE-2026-89066 and CVE-2026-89065 in projen software project synthesis tooling allowing arbitrary command execution on developer workstations and CI runners.
Daniel Okafor19 Sep 202610 min read
ThreatsCloud & SaaSCritical
Siemens Mendix SAML Single Sign-On Flaw Exposes Enterprise Cloud Portals to Account Takeover
Siemens and CISA issue advisory ICSA-26-258-06 for Mendix SAML module vulnerability CVE-2026-80465 allowing unauthenticated remote attackers to hijack enterprise SSO accounts.
Priya Raman19 Sep 20269 min read
ThreatsCloud & SaaSHigh
AWS Patches Hostname Validation Bypass in IoT Device SDK Exposing Core Endpoints to AiTM Attacks
AWS resolves high-severity vulnerability CVE-2026-92943 in AWS IoT Device SDK for Python allowing adversary-in-the-middle telemetry interception and message spoofing.
Daniel Okafor19 Sep 202610 min read
ThreatsCloud & SaaSHigh
Linux Kernel In-Kernel TLS Receive Path Flaw Weaponized in Active Multi-Tenant Cloud Attacks
Threat actors weaponize improper condition check flaw CVE-2025-39682 in Linux kernel kTLS receive path, triggering out-of-bounds corruption in multi-tenant workloads.
CST Newsroom19 Sep 202611 min read
ThreatsCloud & SaaSCritical
Public Exploits Released for Four Linux Kernel Flaws Enabling Local Root and Container Compromise
Working public exploits released for four Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—enabling local root escalation and container escapes.
CST Newsroom19 Sep 202613 min read
ThreatsCloud & SaaSCritical
Amazon EKS Network Policy Agent Flaw Allows Pod Isolation Bypass Across Kubernetes Clusters
AWS patches high-severity flaw CVE-2026-86831 in Amazon EKS aws-network-policy-agent allowing unauthorized pod communication and network isolation bypass.
Daniel Okafor19 Sep 202611 min read
InsightsCloud & SaaS
AWS Resolves Privilege Escalation Flaw in IAM Identity Center Temporary Elevated Access
AWS resolves high-severity privilege escalation flaw CVE-2026-86830 in Temporary Elevated Access Management (TEAM) for IAM Identity Center.
Aisha Noor19 Sep 202610 min read
InsightsCloud & SaaS
Microsoft Resolves CVSS 10.0 Azure AI Foundry Authentication Bypass and Privilege Escalation Flaw
Microsoft patches maximum-severity CVSS 10.0 flaw CVE-2026-85889 in Azure AI Foundry enabling unauthenticated remote network privilege escalation.
Aisha Noor18 Sep 202612 min read
InsightsCloud & SaaS
Azure Security Advisory: Cloud Foundry BOSH CPI Stemcell Code Injection Flaw Dissected
Technical analysis of Azure Cloud Provider Interface vulnerability CVE-2017-4964 enabling arbitrary code injection into virtual machines during deployment.
Mei-Lin Chen18 Sep 202610 min read
ThreatsCloud & SaaSHigh
Linux Kernel Watch Queue Privilege Escalation Flaw CVE-2022-0995 Weaponized in Cloud Attacks
CISA adds Linux kernel watch queue vulnerability CVE-2022-0995 to its KEV catalog following widespread weaponization in cloud container breakout attacks.
Mei-Lin Chen17 Sep 202610 min read
InsightsCloud & SaaS
Google Cloud GKE Workload Identity Privilege Escalation: Cloud Threat Forensics & Hardening
Technical analysis of Google Cloud Platform (GCP) Kubernetes Workload Identity metadata impersonation vectors, token theft forensics, and enterprise IAM hardening.
Mei-Lin Chen16 Sep 202612 min read
InsightsCloud & SaaS
Surge in SEC Form 8-K Cyber Filings: Cloud Storage Exfiltration & Extortion Forensics
Regulatory analysis of recent SEC 8-K Item 1.05 disclosures details how threat actors leverage leaked cloud credentials and misconfigured storage to steal enterprise data.
Priya Raman16 Sep 202612 min read
NewsCloud & SaaS
SEC Form 8-K Breach Analysis: Misconfigured Cloud Storage and IAM Role Assumption Fuel Enterprise Data Exfiltration Wave
Forensic examination of SEC Item 1.05 material cyber filings reveals how compromised IAM credentials and public S3/Blob storage enable rapid data exfiltration.
CST Newsroom15 Sep 20269 min read
ThreatsCloud & SaaSCritical
MLflow Open-Source AI Platform SSRF Flaw Weaponized to Exfiltrate Cloud Credentials
CISA issues urgent warning on CVE-2026-64849, a critical SSRF defect in open-source MLflow model registries allowing attackers to steal cloud IAM metadata and poison AI pipelines.
Priya Raman15 Sep 20268 min read
ThreatsCloud & SaaSCritical
ownCloud Critical Authentication Bypass Flaw Under Active Exploitation
Federal agencies face urgent remediation deadlines as CISA confirms active exploitation of CVE-2023-49105, allowing attackers to access and delete cloud storage files without credentials.
Aisha Noor15 Sep 20267 min read
ThreatsCloud & SaaSCritical
Threat actors actively exploit Langflow AI orchestration flaws to steal cloud API keys and deploy miners
Vulnerability researchers observe mass automated scanning and exploitation of Langflow AI visual frameworks, exfiltrating OpenAI and AWS secrets while deploying botnets.
Priya Raman12 Sep 20266 min read
NewsHealthcare & Pharma
IDScan.net says customer information in cloud accounts may have been accessed
IDScan.net says an unauthorized party may have accessed or copied cloud-account customer information, including names and government ID numbers.
Priya Raman12 Sep 20265 min read
InsightsCloud & SaaS
Nearly 1 in 10 Exposed LiteLLM AI Gateways Leaked Master Admin Keys
Wiz Research discovered that 10% of internet-facing LiteLLM AI proxy gateways accepted the default documentation admin key sk-1234, leaking upstream model keys and cloud IAM tokens.
Aisha Noor10 Sep 20265 min read
ThreatsBanking & FintechHigh
Slim Spider Targets Brazilian Instant Payments (Pix) and Crypto Custody Infrastructure
CrowdStrike revealed Slim Spider, a financially motivated cybercrime group abusing cloud IMDS credentials to penetrate Brazilian instant payment (Pix) and crypto custody systems.
Daniel Okafor8 Sep 20266 min read