Most high-severity cloud security findings are downgraded once an AI agent checks the environment 2026-10-13 at 07:30 By Sinisa Markovic Cloud security platforms turn every failed rule into a finding, and those findings pile up in queues sorted by severity. Research from Sola Security tested what happens to that order when each finding gets checked […]
EU Cyber Resilience Act requirements for containers and Kubernetes 2026-09-30 at 08:00 By Help Net Security Starting in full force on Dec. 10, 2024, the EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products with digital elements sold in EU markets. Reporting obligations will begin on Sept. 11, 2026, […]
EU Cyber Resilience Act requirements for containers and Kubernetes Read More »
Microsoft Patches 18 Vulnerabilities in AI, Cloud Products 2026-09-18 at 13:57 By Eduard Kovacs Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority. The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Patches 18 Vulnerabilities in AI, Cloud Products Read More »
NIST and CISA finalize playbook to stop token theft and forgery 2026-09-16 at 10:40 By Anamarija Pogorelec NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery, theft, and misuse. The guidance, Protecting Tokens and Assertions from Forgery, Theft, and Misuse (NIST IR […]
NIST and CISA finalize playbook to stop token theft and forgery Read More »
Microsoft Rolls Out 22 Fresh Security Patches 2026-08-21 at 11:12 By Ionut Arghire Most of the fixes resolve code execution, privilege escalation, and information disclosure vulnerabilities. The post Microsoft Rolls Out 22 Fresh Security Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Rolls Out 22 Fresh Security Patches Read More »
Fortune 500 Companies Hit in Azure Data Theft Campaign 2026-08-17 at 09:51 By Ionut Arghire A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations. The post Fortune 500 Companies Hit in Azure Data Theft Campaign appeared first on SecurityWeek. This article is an excerpt from […]
Fortune 500 Companies Hit in Azure Data Theft Campaign Read More »
Weak IAM affects up to 98% of cloud environments 2026-08-14 at 08:00 By Anamarija Pogorelec Misconfiguration remains one of the leading threats to cloud environments because a single configuration error can result in public network access, unrotated keys, missing encryption, exposed services, and logging gaps. CISA now mandates baseline cloud configuration practices for US federal […]
Weak IAM affects up to 98% of cloud environments Read More »
Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer 2026-08-04 at 19:15 By Etay Maor Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use. The post Rethinking AI Security: Why CASB and DLP […]
Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer Read More »
Critical Flaw Led to Azure Cosmos DB Pwnage 2026-07-31 at 12:04 By Ionut Arghire Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. The post Critical Flaw Led to Azure Cosmos DB Pwnage appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Critical Flaw Led to Azure Cosmos DB Pwnage Read More »
Virtual Event Today: Cloud & Data Security Summit 2026-07-15 at 15:52 By SecurityWeek News Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments. The post Virtual Event Today: Cloud & Data Security Summit appeared first on SecurityWeek. This article is […]
Virtual Event Today: Cloud & Data Security Summit Read More »
Massive Password Spray Campaign Targeting Azure CLI 2026-07-01 at 10:46 By Ionut Arghire Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY. The post Massive Password Spray Campaign Targeting Azure CLI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Massive Password Spray Campaign Targeting Azure CLI Read More »
Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories 2026-06-26 at 18:23 By Eduard Kovacs AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact. The post Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories appeared first on SecurityWeek. This article is an excerpt from […]
Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories Read More »
Threat actors are recruiting the people who hold cloud logins 2026-06-11 at 11:18 By Anamarija Pogorelec Companies keep most of their data and applications in cloud platforms that anyone can reach with the right login. That setup turns each employee holding those credentials into a security variable, and members of the cybercrime underground have built […]
Threat actors are recruiting the people who hold cloud logins Read More »
Making the cloud prove it followed your privacy wishes 2026-06-11 at 08:43 By Sinisa Markovic Making companies that store personal data in cloud key-value databases handle deletion requests by running the operation and confirming the job is complete. The people making those requests and the regulators overseeing them have had limited means to confirm the […]
Making the cloud prove it followed your privacy wishes Read More »
Oracle rolls out monthly security patch updates 2026-05-05 at 17:46 By Anamarija Pogorelec Oracle is changing how its security fixes are delivered: starting in May 2026, there will be a monthly Critical Security Patch Update. “Each [monthly] CSPU is smaller and more focused, making it easier to apply critical fixes quickly [to customer-managed deployments],” Oracle […]
Oracle rolls out monthly security patch updates Read More »
Chaos malware expands from routers to Linux cloud servers 2026-04-08 at 12:47 By Mirko Zorz Chaos, Go-based malware first documented by Lumen’s Black Lotus Labs, has historically targeted routers and edge devices. A new variant observed in March 2026 shows the malware operating against misconfigured Linux cloud servers, a category of infrastructure the botnet had […]
Chaos malware expands from routers to Linux cloud servers Read More »
Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents 2026-04-01 at 11:14 By Eduard Kovacs Palo Alto Networks has disclosed the details of its analysis of Google Cloud Platform’s Vertex AI. The post Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents Read More »
TeamPCP Moves From OSS to AWS Environments 2026-03-31 at 17:42 By Ionut Arghire After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities. The post TeamPCP Moves From OSS to AWS Environments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
TeamPCP Moves From OSS to AWS Environments Read More »
Cloud Security Startup Native Exits Stealth With $42 Million in Funding 2026-03-18 at 18:24 By SecurityWeek News Phil Venables, former CISO of Google Cloud and now a venture partner at Ballistic Ventures, has joined Native’s board of directors. The post Cloud Security Startup Native Exits Stealth With $42 Million in Funding appeared first on SecurityWeek. […]
Cloud Security Startup Native Exits Stealth With $42 Million in Funding Read More »
Wiz Joins Google Cloud as Landmark Acquisition Closes 2026-03-11 at 16:25 By Eduard Kovacs Google has completed its $32 billion acquisition of the cloud security giant, which will maintain its brand. The post Wiz Joins Google Cloud as Landmark Acquisition Closes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Wiz Joins Google Cloud as Landmark Acquisition Closes Read More »