Advertisement
APT41 Deploys Stealth Backdoor for Cloud Credential Harvesting
China-linked APT41 is targeting AWS, Azure, and Google Cloud with a new zero-detection backdoor designed to harvest credentials and maintain persistence.
Federal Evaluators Flag Microsoft Cloud Security Documentation
U.S. federal evaluators expressed a 'lack of confidence' in Microsoft's cloud security posture due to insufficient documentation, despite approval.
Chaos Malware Variant Targets Cloud Infrastructure via SOCKS Proxy
A new variant of Chaos malware targets misconfigured cloud deployments, leveraging SOCKS proxy capabilities to expand botnet infrastructure beyond edge devices.
Snowflake Data Theft Via SaaS Integrator Breach: Mitigation
Snowflake customers face data theft due to compromised third-party SaaS integrators and stolen authentication tokens. Learn to secure integrations and detect compromise.
ComfyUI Instances Abused by Cryptomining Botnet: Mitigation
Over 1,000 internet-exposed ComfyUI instances are actively targeted by a cryptomining and proxy botnet. Secure your deployments now.
TeamPCP Supply Chain: CERT-EU Confirms Cloud Breach, 1000+ SaaS Environments Affected
CERT-EU confirms European Commission cloud breach via TeamPCP supply chain campaign. Mandiant identifies over 1,000 compromised SaaS environments.
Advertisement
TeamPCP Breach of European Commission Affects 30 EU Entities
CERT-EU attributes a major cloud security breach at the European Commission to threat group TeamPCP, impacting data across 30 European Union organizations.
ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, & Cloud Evasion
Analysis of the latest ThreatsDay Bulletin covering critical pre-authentication exploit chains, stealthy Android rootkits, and advanced CloudTrail evasion techniques.
TeamPCP Supply Chain Campaign: First Victim, Cloud Enumeration, Ransomware
Detailed analysis of TeamPCP supply chain campaign, covering the first confirmed victim, post-compromise cloud enumeration tactics, and dual ransomware operations.
Google Drive Ransomware Protection Enabled by Default for Workspace
Google Workspace now enables AI-powered ransomware detection by default for paying users to identify and mitigate cloud-based encryption threats automatically.
Google Vertex AI Over-Privilege: Data Theft & Cloud Intrusion Risk
Palo Alto Networks researchers found over-privileged AI agents in Google Vertex AI could be exploited for data exfiltration and access to restricted cloud infrastructure.
Vertex AI Permission Flaw Exposes Google Cloud Data — Mitigation Guide
Researchers uncover a security blind spot in Google Cloud Vertex AI, allowing attackers to weaponize AI agents for unauthorized data access and compromise.
ShinyHunters Breach: European Commission Cloud Data Theft
ShinyHunters claimed responsibility for a cyber intrusion and 350GB data theft from European Commission cloud systems. Understand the TTPs and mitigation.
RSAC 2026 Day 2: Advanced AI Automation and Cloud Security Updates
An analysis of key announcements from RSAC 2026 Day 2, focusing on AI-driven incident response, cloud security platforms, and identity-centric defense.
Trivy Supply Chain Attack Targets CI/CD Secrets in DevOps Workflows
A supply chain attack leveraged the Trivy security tool to deploy an infostealer within CI/CD pipelines, compromising cloud credentials and sensitive secrets.
TeamPCP Targets Kubernetes Clusters with Iran-Specific Wiper Malware
TeamPCP is targeting misconfigured Kubernetes clusters to deploy a data-wiping script that specifically triggers on Iranian system configurations and locales.
CanisterWorm Wiper Attacks Target Iran via Cloud Misconfigurations
Analysis of the CanisterWorm wiper targeting Iranian systems through cloud service vulnerabilities, shifting from financial extortion to destructive operations.
Beast Gang OpSec Fail: Ransomware Server Exposes TTPs
Beast Gang's OpSec failure exposes their cloud ransomware server, revealing aggressive tactics against network backups. Defenders gain insight into their TTPs.
Native Exits Stealth with $42M to Tackle Cloud Infrastructure Risks
Cloud security startup Native raises $42M to improve infrastructure resilience. Phil Venables joins the board to guide its cloud-native security strategy.
Unifying Context: Breaking Attack Paths via Cybersecurity Mesh
Security teams struggle to prioritize vulnerabilities without context. Discover how CSMA identifies and disrupts complex attack paths to sensitive crown jewels.
Tracebit Raises $20M to Scale Cloud-Native Deception Technology
Tracebit secures $20M in Series A funding to expand its cloud-native deception platform, helping SOC teams detect lateral movement and credential theft.
Google Cloud Attacks: Exploitation Outpaces Patching Cycles
Vulnerability exploitation, not stolen credentials, is the primary initial compromise vector for Google Cloud environments, often bypassing patching efforts.
Google's $17M Bug Bounty: Insights on Chrome & Cloud Security
Google paid out $17 million in bug bounties in 2025, with major rewards for Chrome and cloud security flaws. Understand the implications for enterprise defense.
Wiz Joins Google Cloud: Strategic Implications for Cloud Security
Analyzes Google Cloud's landmark acquisition of Wiz, exploring the strategic impacts on cloud security posture, multi-cloud defense, and compliance for enterprises.