Threat actors are recruiting the people who hold cloud logins 2026-06-11 at 11:18 By Anamarija Pogorelec Companies keep most of their data and applications in cloud platforms that anyone can reach with the right login. That setup turns each employee holding those credentials into a security variable, and members of the cybercrime underground have built […]
Threat actors are recruiting the people who hold cloud logins Read More »
Making the cloud prove it followed your privacy wishes 2026-06-11 at 08:43 By Sinisa Markovic Making companies that store personal data in cloud key-value databases handle deletion requests by running the operation and confirming the job is complete. The people making those requests and the regulators overseeing them have had limited means to confirm the
Making the cloud prove it followed your privacy wishes Read More »
Oracle rolls out monthly security patch updates 2026-05-05 at 17:46 By Anamarija Pogorelec Oracle is changing how its security fixes are delivered: starting in May 2026, there will be a monthly Critical Security Patch Update. “Each [monthly] CSPU is smaller and more focused, making it easier to apply critical fixes quickly [to customer-managed deployments],” Oracle
Oracle rolls out monthly security patch updates Read More »
Chaos malware expands from routers to Linux cloud servers 2026-04-08 at 12:47 By Mirko Zorz Chaos, Go-based malware first documented by Lumen’s Black Lotus Labs, has historically targeted routers and edge devices. A new variant observed in March 2026 shows the malware operating against misconfigured Linux cloud servers, a category of infrastructure the botnet had
Chaos malware expands from routers to Linux cloud servers Read More »
Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents 2026-04-01 at 11:14 By Eduard Kovacs Palo Alto Networks has disclosed the details of its analysis of Google Cloud Platform’s Vertex AI. The post Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents Read More »
TeamPCP Moves From OSS to AWS Environments 2026-03-31 at 17:42 By Ionut Arghire After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities. The post TeamPCP Moves From OSS to AWS Environments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
TeamPCP Moves From OSS to AWS Environments Read More »
Cloud Security Startup Native Exits Stealth With $42 Million in Funding 2026-03-18 at 18:24 By SecurityWeek News Phil Venables, former CISO of Google Cloud and now a venture partner at Ballistic Ventures, has joined Native’s board of directors. The post Cloud Security Startup Native Exits Stealth With $42 Million in Funding appeared first on SecurityWeek.
Cloud Security Startup Native Exits Stealth With $42 Million in Funding Read More »
Wiz Joins Google Cloud as Landmark Acquisition Closes 2026-03-11 at 16:25 By Eduard Kovacs Google has completed its $32 billion acquisition of the cloud security giant, which will maintain its brand. The post Wiz Joins Google Cloud as Landmark Acquisition Closes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Wiz Joins Google Cloud as Landmark Acquisition Closes Read More »
Cloud-audit: Fast, open-source AWS security scanner 2026-03-11 at 09:21 By Mirko Zorz Running AWS security audits without a dedicated security team typically means choosing between enterprise platforms with per-check billing and generic open-source scanners that produce findings with no remediation guidance. Cloud-audit, a Python CLI tool published on GitHub by Mariusz Gebala, takes a narrower
Cloud-audit: Fast, open-source AWS security scanner Read More »
Iranian Strikes on Amazon Data Centers Highlight Industry’s Vulnerability to Physical Disasters 2026-03-03 at 22:09 By Associated Press Two AWS data centers in the United Arab Emirates were “directly struck” and another facility in Bahrain was also damaged after a drone landed nearby. The post Iranian Strikes on Amazon Data Centers Highlight Industry’s Vulnerability to
AWS Expands Security Hub Into a Cross-Domain Security Platform 2026-03-02 at 15:09 By Kevin Townsend The AWS Security Hub Extended plan aims to reduce security tool sprawl by correlating findings across multiple security domains. The post AWS Expands Security Hub Into a Cross-Domain Security Platform appeared first on SecurityWeek. This article is an excerpt from
AWS Expands Security Hub Into a Cross-Domain Security Platform Read More »
AWS Security Hub Extended brings enterprise security under one roof 2026-02-26 at 23:18 By Anamarija Pogorelec AWS Security Hub Extended is a plan within Security Hub that simplifies how customers procure, deploy, and integrate a full-stack enterprise security solution across endpoint, identity, email, network, data, browser, cloud, AI, and security operations. The plan allows customers
AWS Security Hub Extended brings enterprise security under one roof Read More »
Microsoft expands Sovereign Cloud security with governance, local productivity and AI 2026-02-24 at 15:26 By Anamarija Pogorelec Microsoft expands Microsoft Sovereign Cloud with new disconnected and AI capabilities that help organizations run critical infrastructure, productivity services and large AI models inside sovereign boundaries while keeping governance and operational continuity across connected and disconnected environments. Sovereign
Microsoft expands Sovereign Cloud security with governance, local productivity and AI Read More »
Vulnerabilities Allowed Full Compromise of Google Looker Instances 2026-02-04 at 15:45 By Eduard Kovacs The flaws dubbed LookOut can be exploited for remote code execution and data exfiltration. The post Vulnerabilities Allowed Full Compromise of Google Looker Instances appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Vulnerabilities Allowed Full Compromise of Google Looker Instances Read More »
Upwind Raises $250 Million at $1.5 Billion Valuation 2026-01-26 at 16:47 By Ionut Arghire The CNAPP company will use the fresh investment to scale its runtime-first cloud security offering across data, AI and code. The post Upwind Raises $250 Million at $1.5 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Upwind Raises $250 Million at $1.5 Billion Valuation Read More »
Exposed training apps are showing up in active cloud attacks 2026-01-22 at 09:06 By Sinisa Markovic Security teams often spin up vulnerable applications for demos, training, or internal testing. A recent Pentera research report documents how those environments are being left exposed on the public internet and actively exploited. The research focuses on intentionally vulnerable
Exposed training apps are showing up in active cloud attacks Read More »
Minimal Ubuntu Pro expands Canonical’s cloud security offerings 2026-01-13 at 14:13 By Sinisa Markovic Canonical has released Minimal Ubuntu Pro images for use on public cloud platforms, aiming to give teams a smaller base image with a narrower software footprint. The solution is designed for organizations that want tighter control over what runs inside production
Minimal Ubuntu Pro expands Canonical’s cloud security offerings Read More »
Gen AI data violations more than double 2026-01-07 at 08:32 By Sinisa Markovic Security teams track activity that moves well beyond traditional SaaS platforms, with employees interacting daily with generative AI tools, personal cloud services, and automated systems that exchange data without direct human input. These patterns shape how sensitive information moves across corporate environments
Gen AI data violations more than double Read More »
Cloud security is stuck in slow motion 2025-12-23 at 08:23 By Anamarija Pogorelec Cloud environments are moving faster than the systems meant to protect them. A new Palo Alto Networks study shows security teams struggling to keep up with development cycles, growing cloud sprawl, and attacker tactics that now compress breaches into minutes instead of
Cloud security is stuck in slow motion Read More »
Palo Alto Networks, Google Cloud Strike Multibillion-Dollar AI and Cloud Security Deal 2025-12-19 at 18:44 By Mike Lennon The agreement strengthens technical and commercial ties as Palo Alto migrates workloads and adopts Google’s Vertex AI and Gemini models. The post Palo Alto Networks, Google Cloud Strike Multibillion-Dollar AI and Cloud Security Deal appeared first on
Palo Alto Networks, Google Cloud Strike Multibillion-Dollar AI and Cloud Security Deal Read More »