Cyber CrimeNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
> Search
30 results for “cloud”
Cyber Crime
Cyber Crimen0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
Cyber CrimeRansomware Hits Japanese Cloud Serving 495 Orgs
IDC Frontier says a ransomware attack on its IDCF Cloud disrupted East Japan Region 1 and locked 495 companies and local governments out of management consoles.
Cyber CrimeAI Agent SDK Hit by Worm's Latest Strike
Shai-Hulud worm compromised Tensorlake's npm SDK version 0.5.144, stolen credentials and cloud keys at risk for developers.
CloudAWS Agent Flaws Expose Control Gap
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
Cyber CrimeMALFEX npm Campaign Hidden in Eight Packages
CloudSEK and Checkmarx say a lone actor shipped 12 npm packages since 2023, eight flagged malicious and downloaded 40,767 times.
AI & MLGhost's $3,499 AI box sells out first run
A teen-founded startup says its on-device AI computer sold out its first batch, betting privacy beats cloud convenience.
SecurityFake Zoom Installer Delivers macOS Backdoor
Researchers at Jamf say a bogus Zoom app installs CloudSyncD, a backdoor that abuses user passwords to run with root privileges.
Cyber CrimeAntino Backdoor Hides C2 in Outlook, OneDrive
A China-nexus actor is using Microsoft 365 mailboxes and cloud storage as dead drops to command a Rust-compiled Windows backdoor, Talos reports.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
SecurityCloudflare Vows Quantum-Proof TLS Shift
Cloudflare says it will issue post-quantum TLS certificates using Merkle Tree Certificates, targeting Q1 2027 after acquiring a GlobalSign root.
Cyber CrimeShinyHunters Hack FBI Jobs Site, Stolen Data Claimed
ShinyHunters claims it breached an Oracle PeopleSoft zero-day on the FBI jobs site, stealing 2-3 TB of employee data and demanding a retraction, not ransom.
Cyber CrimeStolen Passwords Expose 1,787 Water Providers
SpyCloud research finds infostealer malware has harvested credentials tied to 1,787 U.S. water and wastewater organizations, some reaching operational networks.
SecurityArista VeloCloud Flaw Exploited, Scores 10.0
Arista says attackers are actively exploiting CVE-2026-93952, a maximum-severity flaw in on-premises VeloCloud Orchestrator setups using certificate authentication.
Cyber CrimeProvenance Fails as npm Supply Chain Attack Hits
CloudSEK reports attackers abused npm trusted publishing to ship GHAPPIER loader, exposing limits of provenance attestations.
SecurityWhy identity dark matter hides in plain sight
The Hacker News explains how unregistered accounts and machine credentials keep IAM blind spots open across cloud estates.
SecurityOne Week, Nine Flaws, No Easy Fix
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
Cyber CrimeBrevo Breach Turns CDN Edge Into Attack Path
A hardcoded Cloudflare key let attackers rewrite Brevo's sites and customer scripts for hours, pushing ClickFix malware at scale.
SecurityA Staging Server Left Open for Six Months
A cloud-migration audit found a temporary test environment exposing live customer data, reinforcing a familiar lesson about forgotten infrastructure.
SecurityMarimo RCE Hit by Human at Machine Speed
Sysdig says a hand-built toolkit let a human operator exploit a Marimo flaw in eight seconds, without any sign of LLM use.
SecurityDefense Cyber Spending Set to Double
MarketsandMarkets projects the cyber warfare market will grow from $14.99bn in 2026 to $28.75bn by 2031, driven by attacks on military systems.
Cyber CrimeIDScan Breach Exposes License Data
IDScan confirmed hackers accessed customer data in its cloud platform after reports linked it to 153 million stolen driver's license scans.
SecurityLiteLLM's Default Admin Key Exposed
A Wiz Research scan found 294 exposed LiteLLM gateways accepted the example admin key sk-1234, granting access to stored provider credentials.
Cyber CrimeSlim Spider Targets Crypto Custody in Brazil
CrowdStrike uncovers Brazil-based threat actor Slim Spider stealing cloud credentials to access cryptocurrency custody secrets.
SecurityPhaaS Campaign Targets IT Providers via M365 Phishing
CloudSEK reports BigBear 2.0 phishing operation stole over 5,100 Microsoft credentials, hitting IT firms hardest.
SecurityWindows 2026 Bug Patch? No, the Cloud
Microsoft's cloud patches, Dropbox account breaches, and Guardio's $1.1B funding round headline this week's security news.
Tech NewsCrusoe's $30B valuation signals AI infrastructure buildout
Crusoe raises $3B at a $30B valuation and signs a $13B cloud deal with Jane Street, fueling its AI expansion.
SecurityAI agents rewrite cloud security rules
Autonomous AI attackers can chain cloud misconfigurations at machine speed, forcing CISOs to rethink defense.
SecurityTerminalFix Malware Exploits Fake CAPTCHAs
Microsoft warns of TerminalFix ClickFix variant that tricks users into running malicious PowerShell commands via fake Cloudflare checks.