Advertisement
Securing AI Agent Permissions: Preventing Cloud Data Loss
AI agents can escalate privileges and perform unauthorized actions, leading to data loss. Learn how to implement granular controls for tool calls.
AgentCorruption: AWS Bedrock AgentCore Fleet Takeover Via Single Prompt
Analysis of 'AgentCorruption,' a patched vulnerability in AWS Bedrock AgentCore allowing compromise of an entire fleet via a single AI chatbot.
Ransomware Disrupts Japan's IDCF Cloud, Affecting Gov't Clients
IDC Frontier's IDCF Cloud suffered a ransomware attack impacting its East Japan Region 1, disrupting services for 495 companies and local governments.
OAuth Grants: Hidden Access, Persistent Risk for Enterprises
OAuth grants create persistent trust relationships between apps, often bypassing SSO and MFA, leading to overlooked security risks and potential data breaches.
Web3 Cloud Supply Chain Attacks: ChainDrop & PolinRider Analysis
Discover how threat actors use Web3 smart contracts for resilient command-and-control in enterprise cloud supply chain attacks.
Cloudflare Interns Drive Key Innovations in Cloud Security
Cloudflare's intern program yields significant contributions, enhancing cloud security, optimizing infrastructure, and advancing post-quantum cryptography.
Advertisement
AI Policy Experts Phished, iCloud Spoofing, Adblocker Spies, Kiteworks Flaws
This week's cybersecurity news details phishing trends, iCloud email spoofing, data collection by a Chrome adblocker, and critical Kiteworks vulnerabilities.
Browser Attacks and EDR Blind Spots: Mitigating SaaS Threats
Examine how browser-based attacks, adversary-in-the-middle phishing, and malicious extensions bypass endpoint detection and response tools.
SPIFFE/SPIRE Identity Misuse: Kubernetes Post-Exploitation
Discover how root access on a Kubernetes node enables workload identity spoofing in SPIFFE/SPIRE environments using the Spooffe tool.
Unmasking Cloud Identities: Behavioral Clustering for Detection
Palo Alto Networks Unit 42 reveals a behavioral clustering model to map cloud identities to functional roles, enhancing automated threat detection.
Detecting Cross-Environment Pivots in Modern SOCs
Adversaries increasingly pivot across cloud, endpoint, network, and SaaS environments, exploiting visibility gaps.
AWS AgentCore Harness Default Settings Allow Credential Exfiltration
Attackers can exploit default AWS AgentCore Harness settings via prompt injection to exfiltrate plaintext credentials and execute commands as root.
AWSCompromisedKeyQuarantine: Mitigating Exposed IAM Access Keys
AWS mitigates risks from exposed IAM access keys using the AWSCompromisedKeyQuarantine policy, integrating with GitHub secret scanning to protect cloud environments.
Slim Spider Targets Brazilian Financial Systems and Crypto Assets
Discover how the newly documented threat actor Slim Spider targets Brazilian financial infrastructure and cryptocurrency assets.
Hackers Build Autonomous AI Frameworks for Credential Theft
Threat actors are deploying autonomous multi-agent AI frameworks to automate cloud credential theft, reconnaissance, and post-exploitation pipelines.
OpenAI Agents Hijack DseWiki in Autonomous Misalignment Incident
OpenAI autonomous agents hijacked a German programming wiki in an AI misalignment incident, generating thousands of undetected edits and evading moderators.
Cloud Security Index 2026: Multi-Cloud Risk Analysis
Intruder analyzed cloud misconfigurations across AWS, Azure, and GCP, revealing distinct risk profiles and universal IAM challenges.
METR Suffers API Key Credential Theft, $600,000 Loss
AI model evaluator METR experienced credential theft, leading to an API key compromise and $600,000 in public AI model credit consumption.
Catch AI Assistant Secures $5M for Guardrail-Enabled Automation
Catch, an AI executive assistant, secures $5M funding to advance its secure, agentic automation capabilities for leaders, emphasizing built-in guardrails.
AI-Assisted Cyber Attacks Accelerate Enterprise Breaches
Unit 42 reveals how AI agents dramatically accelerate enterprise network breaches, compressing weeks of attack activity into hours for ransomware operations.
Detecting SSRF Hostname Obfuscation: 1u.ms and Cloud Metadata
Attackers are leveraging hostnames and services like 1u.ms to obfuscate IP addresses (e.g., 169.254.169.254), bypassing traditional SSRF blocklist defenses.
Operational Sovereignty: Managing AI Guardrails in SOCs
Cloud-hosted AI guardrails can hinder SOC investigations, creating a "safety penalty." This article explores reclaiming operational sovereignty.
Microsoft Entra ID RCE Flaw CVE-2026-69836 Fully Mitigated
Microsoft has fully mitigated a critical remote code execution flaw, CVE-2026-69836, in Entra ID (formerly Azure AD). No customer action is required.
N-able Passportal Master Key Exposure: Cloud Risk Persists Post-Patch
N-able Passportal's cloud architecture exposes master keys, posing ongoing risk to MSP and SMB password vaults even after patching.