Do Son
TL;DR AWS published two security bulletins on October 2, 2026, covering four CVEs. Three hit Loom for...
Cloud Security
Two stolen Azure identities gave one attacker control over an entire cloud tenant in June 2026. According...
TL;DR Attackers are mass-scanning the internet for exposed Vite development servers. They abuse the Vite development server...
At a glance Microsoft threat analysts reported active cloud intrusions utilizing passkey social engineering to breach enterprise...
At a glance Actor or group Unidentified threat actors Activity type Password spraying Targets or victims AWS...
At a glance Organization Multiple organizations worldwide Data Exposed AWS keys, Stripe secrets, GitHub tokens, internal records...
TL;DR Apache CloudStack shipped releases 4.20.3.1 and 4.22.1.1. They fix 20 CVEs across the platform. The most...
At a glance Factor Details Organization Multiple enterprises, AI developers, and cloud users globally Data Exposed 64,024...
Japanese cloud computing and data center services provider Sakura Internet recently issued a security advisory disclosing that...
At a glance Actor or group UNC6671 (suspected single coordinated group) Activity type Vishing-led data theft and...
European cloud provider OVH just published a candid retrospective on its emergency patch campaign. The post explains...
At a Glance Field Detail Actors UNK_pyreq2323 and UNK_OutFlareAZ (two independent, unattributed clusters) Activity Account enumeration and...
Last week, security researcher @Cereblab exposed a troubling behavior in Grok Build. The tool silently transmitted developers’...
Insufficient Access Controls inside Mistral API OpenStack Mistral workflow service users must address a critical security vulnerability...
Urgent Alert for DevOps Engineers Microsoft security analysts recently identified an active threat vector targeting modern software...
Security analysts have released a comprehensive analysis regarding specialized offensive tools in modern network breaches. Specifically, hackers...
Security researchers have discovered a critical vulnerability in the open-source lightweight virtualization project, Kata Containers. Specifically, this...
Security researchers have uncovered a severe flaw in a popular open-source serverless platform. Specifically, the newly discovered...
Dell has issued an urgent security update to address a maximum severity flaw in its cloud storage...
Security researchers have discovered a stealthy cloud threat hiding inside enterprise cloud environments. Specifically, FortiGuard Labs recently...
A sophisticated identity-centric threat actor operating under the brand “BlackFile” has spent the early months of 2026...
Just weeks after a massive international law enforcement operation dismantled its primary server infrastructure, the notorious Tycoon...