KubernetesAddressing protocol security gaps in multi-tenant Kubernetes
InsightsCloud & SaaS
Technical architectural analysis of Addressing cloud workload protection, IAM integrity controls, and enterprise boundary defense.
Aisha Noor11 min read
Topic
IAM: news, advisories and analysis, page 2
49 articles
Coverage, page 2
Kubernetes
AWS CloudAWS IAM Identity Center SAML Canonicalization Flaw Enables Cross-Account Administrative Role Assumption (CVE-2026-78520)
NewsCloud & SaaSCVE-2026-78520Critical
AWS patches a critical vulnerability in IAM Identity Center (CVE-2026-78520) allowing manipulated SAML XML comments to bypass role assignment boundaries.
CST Editorial Desk8 min read
GoogleGoogle Cloud Run Metadata Service SSRF Filter Bypass Enables IAM Service Account Token Exfiltration
ThreatsCloud & SaaSCVE-2026-64205Critical
A security flaw in Google Cloud Run's internal metadata proxy allows server-side request forgery to steal workload identity IAM tokens.
CST Editorial Desk8 min read
AWS CloudAWS Identity and Access Management SCIM Endpoint Authentication Bypass Exposes Cloud Federation Roles
ThreatsCloud & SaaSCVE-2026-62210Critical
A security vulnerability in AWS IAM Identity Center's SCIM protocol implementation could allow token bypass during automated user and group provisioning.
CST Editorial Desk8 min read
MicrosoftMicrosoft Azure Container Apps Dapr Sidecar Token Impersonation Flaw Enables Internal Microservice Hijacking (CVE-2026-58204)
ThreatsCloud & SaaSCVE-2026-58204High
Microsoft MSRC publishes a security bulletin detailing an identity impersonation flaw in Azure Container Apps Dapr sidecars allowing cross-service token spoofing.
CST Editorial Desk8 min read
AWS CloudAWS EKS Pod Identity Agent Flaw Lets Compromised Pods Replay IAM Credentials
ThreatsCloud & SaaSCVE-2026-54201High
AWS Security Bulletins disclose a privilege escalation vulnerability in the Amazon EKS Pod Identity Agent allowing compromised pods to replay IAM credentials.
CST Editorial Desk8 min read
GoogleGoogle Cloud Run Internal Metadata Proxy Flaw Permits Cross-Container Service Account Token Extraction
ThreatsCloud & SaaSCVE-2026-45129High
Google Cloud releases emergency advisory for CVE-2026-45129, resolving an internal metadata server proxy flaw in Cloud Run allowing cross-container token leakage.
CST Editorial Desk8 min read
AWS CloudAWS S3 Multi-Region Access Point Flaw Enables IAM Signature Version 4 Authorization Bypass CVE-2026-79787
ThreatsCloud & SaaSCVE-2026-79787Critical
AWS Security Bulletin details an authorization validation defect in S3 Multi-Region Access Point endpoints permitting IAM privilege escalation.
Daniel Okafor8 min read
AWS CloudAWS Loom AI Agent Platform Flaw Gave Unauthenticated Attackers Super-Admin Control
ThreatsCloud & SaaSCVE-2026-103956Critical
CVE-2026-103956 in AWS Labs Loom (CVSS 10.0) let any network client act as super-admin on IdP-less deployments. Two SSRF flaws leaked tokens. Upgrade to 1.7.0+.
Aisha Noor7 min read
Threat IntelInternet2 Grouper Access Management Rule Engine Flaw Allows Unauthorized Privilege Escalation (CVE-2026-103470)
ThreatsCloud & SaaSCVE-2026-103470Critical
A privilege escalation vulnerability in Internet2 Grouper before v7.5.1 allows authenticated users with rule editing rights to elevate to full system administrator.
Priya Raman11 min read
Deep DiveThe Lethal Trifecta in Enterprise AI Agents: Why Input Filters Fail Against Tool Hijacking
InsightsCloud & SaaS
An architectural analysis of the Lethal Trifecta in autonomous enterprise AI agents: untrusted input, autonomous execution, and access to privileged external tools.
CST Editorial Desk11 min read
AWS CloudAWS Bedrock Agent Runtime Vulnerability Exposes Temporary IAM Credentials CVE-2026-62181
ThreatsCloud & SaaSCVE-2026-62181High
AWS Security Bulletin details an environment leakage defect in Amazon Bedrock Agent action group runtimes permitting cross-session IAM credential exposure.
Aisha Noor8 min read
MicrosoftMicrosoft Entra ID Assumed-Immutable Data Modification Flaw Enables Tenant Privilege Escalation CVE-2026-50481
ThreatsCloud & SaaSCVE-2026-50481Critical
A critical vulnerability in Microsoft Entra ID allows authenticated users to manipulate assumed-immutable directory attributes and achieve Global Admin rights.
Aisha Noor9 min read
AWS CloudAWS Athena ClickHouse Connector Flaw Enables Cross-Account Secrets Manager Extraction
ThreatsCloud & SaaSCVE-2026-75910High
AWS Security Bulletin 2026-084-AWS warns of authorization flaw CVE-2026-75910 in Athena ClickHouse connector allowing arbitrary Secrets Manager data leakage.
Daniel Okafor14 min read
GoogleGoogle Cloud Integration Connectors Authorization Flaw Enables Service Account Privilege Escalation CVE-2026-4644
ThreatsCloud & SaaSCVE-2026-4644High
Google Cloud Bulletin GCP-2026-059 details missing authorization flaw CVE-2026-4644 in Integration Connectors enabling project-level privilege escalation.
Mei-Lin Chen14 min read
AWS CloudAWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda
ThreatsCloud & SaaSCVE-2026-94384High
AWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
CST Editorial Desk14 min read
GoogleGoogle Cloud OS Login Privilege Escalation Flaw Exposes Compute Engine Instances to Root Takeover CVE-2020-8907
ThreatsCloud & SaaSCVE-2020-8907High
Google Cloud resolves a privilege escalation flaw in Compute Engine guest-oslogin that allowed users with compute.osLogin IAM permissions to gain root access.
Aisha Noor17 min read
MicrosoftAzure Cosmos DB Injection Flaw Enabled Cloud Privilege Escalation
ThreatsCloud & SaaSCVE-2026-87701Critical
Microsoft addresses CVSS 9.6 vulnerability CVE-2026-87701 in Azure Cosmos DB allowing authenticated attackers to execute downstream injection and elevate privileges.
CST Editorial Desk15 min read
MicrosoftGoogle Cloud Patches Critical GKE Multi-Cloud Flaw Enabling Cross-Project Cluster Hijack and Service Account Impersonation
ThreatsCloud & SaaSCritical
Google Cloud remediates critical GCP-2026-058 flaw in GKE Multi-Cloud APIs where missing project checks enabled unauthorized cluster registration and IAM impersonation.
CST Editorial Desk16 min read
AWS CloudAmazon SSM Agent Path Traversal Flaw Enables Root Host Takeover via Malicious S3 Object Keys
ThreatsCloud & SaaSCVE-2026-81849High
AWS resolves high-severity CVSS 8.8 flaw CVE-2026-81849 in amazon-ssm-agent where crafted S3 object keys allow authenticated IAM actors to overwrite root host files.
Daniel Okafor12 min read
MicrosoftMicrosoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution
ThreatsCloud & SaaSCVE-2026-69836Critical
Microsoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-69836 in Entra ID allowing unauthenticated remote code execution via unsafe object deserialization.
Daniel Okafor12 min read
AWS CloudAWS API MCP Server Flaw Let AI Agents Bypass Security Policies
ThreatsCloud & SaaSCVE-2026-16584High
AWS Labs resolves high-severity vulnerability CVE-2026-16584 in AWS API MCP Server allowing autonomous AI agent workflows to bypass security policies upon initialization failure.
Daniel Okafor11 min read
AWS CloudAWS Resolves Privilege Escalation Flaw in IAM Identity Center Temporary Elevated Access
InsightsCloud & SaaSCVE-2026-86830
AWS resolves high-severity privilege escalation flaw CVE-2026-86830 in Temporary Elevated Access Management (TEAM) for IAM Identity Center.
Aisha Noor10 min read
MicrosoftCloud Workload Security: BOSH Azure & AWS Microservice Stemcell Privilege Escalation Analysis
InsightsCloud & SaaS
Technical breakdown of cloud workload stemcell isolation defects, container escape vectors, and hypervisor boundary hardening across AWS and Microsoft Azure.
Mei-Lin Chen12 min read