Cloud
Cloud platforms, services, and infrastructure
Building incident playbooks for machine identity breaches
Pull up your SOC’s compromised account playbook and read through the first 15 minutes. Most SOCs begin their response by...
Fake software installers are turning your PCs into profit centers for hackers
Users looking for cracked commercial software, free games, plugins, and unofficial utilities could be signing up for mor...
Choosing a WAAP in 2026: 3 questions that separate the shortlist
One platform or four Your WAF renewal is coming up. The API team has its own tooling in mind, the fraud team wants a bot...
A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure
In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime group, Lumen’s Black Lotus La...
Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets
Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to trick organizatio...
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting ma...
Google, Mozilla revoke eMudhra intermediates after private key compromise
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhr...
14 ways attackers abuse cloud services to hack your enterprise
Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious...
ConnectWise backup credentials exposed multiple Microsoft 365 tenants
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environ...
Security Breach Alert: Vulnerability in BeyondTrust Remote Support Compromises User Data
A critical zero-day vulnerability in BeyondTrust Remote Support has been linked to a Chinese espionage group, prompting...
Assessing Quantum Readiness: Beyond CDN Protection
Many businesses misinterpret CDN support for post-quantum cryptography as comprehensive quantum readiness across their o...
Navigating the Challenges of Autonomous Agents in AWS Security
AWS faces ongoing security challenges with autonomous agents, highlighting the complex balance between functionality and...
AI-Driven Attacks Compromise Azure Resources via Identity Theft
An AI-based campaign is targeting Azure by utilizing compromised identities for resource destruction and credential thef...
Urgent Security Flaw in VeloCloud Orchestrator Exposes Businesses to Attacks
A critical vulnerability in VeloCloud Orchestrator affects on-prem deployments, with only select patches available. Imme...
Z.ai Tackles Security Flaws in ZCode Coding Assistant to Protect Enterprise Code Integrity
Z.ai has disabled a problematic feature in its coding assistant after it inadvertently uploaded user code to Alibaba Clo...
Rethinking Revocation: The Evolving Threat of Cloud-Based Backdoors
Revocation alone isn't enough in the face of advanced adversaries using cloud infrastructure; organizations must adapt t...
Phishing Kit GhostCode Extracts Microsoft 365 Credentials via OAuth Exploitation
GhostCode, a new phishing kit, exploits OAuth 2.0 device code authentication to compromise Microsoft 365 accounts, highl...
Navigating AI Governance: 16 Essential Tools for Safeguarding LLMs
Explore 16 key tools that empower teams to ensure the responsible governance of AI, addressing security, compliance, and...
Microsoft Updates Cloud Addresses for M365 and Teams: What You Need to Know
Microsoft is changing the addresses for M365 and Teams services, requiring organizations to update settings for continue...
Exploiting Trust: Fake Verification Attacks on India's STPI Site
A recent incident involving India's STPI revealed a malicious fake Cloudflare verification page that could trick users i...