Cloud Security

Azure SRE Agent flaw lets outsiders silently eavesdrop on enterprise cloud operations

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and credentials to any Entra ID account, researchers said.

China-linked cloud credential heist runs on typos and SMTP

The Linux-based ELF backdoor is targeting cloud workloads across providers, using SMTP-based C2 and typosquatted Alibaba domains to harvest credentials and metadata.

CERT-EU blames Trivy supply chain attack for Europa.eu data breach

Attackers exploited a vulnerability scanner to steal 350GB of data that they then leaked on the dark web.

Why Kubernetes controllers are the perfect backdoor

Your Kubernetes automation could be working against you. Malicious controllers create "ghost" sidecars that survive restarts and hide in plain sight.

SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware

European Commission data stolen in a cyberattack on the infrastructure hosting its web sites

The Commission says its internal IT systems weren’t affected, but it is still working to determine the attack’s impact.

The multi-billion dollar mistake: Why cloud misconfigurations are your biggest security threat

Most "hacks" are just companies leaving the digital front door unlocked. A few basic setting tweaks and MFA could have saved firms like Snowflake from total chaos.