SecurityNIST Flags Multi-Cloud Security Pitfalls
New NIST report outlines 23 unique challenges in multi-cloud environments, urging community-driven solutions.
> Search
25 results for “cloud security”
Security
SecurityAI Assistance Moves Into SOC Workflows
Wazuh adds AI-powered analyst tools and integrations to ease security operations workload.
SecurityAzure Tenant Data Theft Hits Fortune 500 Firms
A threat actor is selling millions of records allegedly stolen from Azure tenants of major companies.
Cyber CrimeAitM Phishing Targets Financial Data
A sophisticated phishing campaign uses adversary-in-the-middle tactics to compromise Microsoft 365 accounts for financial espionage.
SecurityBrowser Security Gaps in the AI Era
The shift toward browser-based workflows and AI tools is revealing significant vulnerabilities in traditional network security.
SecurityOligo Secures $60M for Runtime Security
The Tel Aviv-based security firm reaches a $140 million total funding milestone to scale its application and cloud workload protections.
Cyber CrimeCloud and SaaS Now Primary Attack Targets
A new report identifies a strategic shift among threat actors, moving away from simple malware toward identity and trust-based exploits.
SecurityOkta Targets Identity Security Expansion
Okta plans to acquire Permiso Security to bolster its identity threat detection capabilities within multi-cloud environments.
SecurityMaintenance Bug Triggers Cloud Outage
A routine network update error disrupted Microsoft 365 and Azure services, prompting a full review of automated maintenance systems.
SecurityAzure App Service Privilege Escalation Flaw
A newly identified critical vulnerability in Azure App Service permits unauthorized network-based privilege escalation.
SecurityNadMesh Botnet Turns AI Tools Into Hooks
A newly identified Go-based botnet is pivoting from simple compute-hijacking to harvesting cloud credentials from exposed AI services.
SecurityThe Hidden SaaS Risk to Enterprise Data
Modern security programs are failing to see deep inside SaaS platforms, leaving sensitive data exposed through quiet misconfigurations.
SecurityShark Vacuum Flaw Exposes Root Access
A configuration oversight in SharkNinja's AWS integration allows unauthorized remote commands on connected robot vacuums.
SecurityWhy SASE Architectures Face New Hurdles
Modern internet protocols and the rise of AI workflows are challenging the effectiveness of traditional network-centric security.
TrendingEvaluating 2026 Cloud Security Priorities
A look at the professional discourse surrounding cloud and data security strategies slated for discussion this July.
SecurityThe Silent OAuth Exploit Bypassing Cloud Identity Defenses
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.
SecurityBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
Cyber CrimeAI Gateways Face New Threats as Attackers Pivot to Cryptomining
Researchers have identified a new vector where cloud-hosted AI infrastructure is being hijacked for illicit cryptocurrency operations.
SecurityWhen Internal Missteps Expose Critical Cloud Infrastructure
A contractor's exposed repository forced a rapid internal incident response at CISA to secure sensitive cloud credentials.
SecurityMastering Entra ID Defense Through Gamified Simulation Training
Varonis Threat Labs launches an interactive capture-the-flag experience to teach security teams how to combat modern identity attacks.
SecurityCloud Authentication Under Siege: The Rise of OAuth ID Spoofing
A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.
SecurityThe Jurassic Park Trap: Why Modern Resilience is a Dangerous Myth
Cybersecurity leaders are mistaking visual dashboards for true operational survivability in an increasingly chaotic, AI-driven era.
SecurityThe Hidden Risks Lurking in Shared AI Agent Environments
A single edit permission in Google Cloud's Dialogflow CX could have allowed attackers to hijack agents and steal sensitive data.
SecurityLessons in Transparency from CISA's Six-Month GitHub Exposure
A CISA postmortem reveals how a contractor's public repository leak serves as a critical guide for improving organizational security.
Cyber CrimeThe Rise of Vibe-Coded Malware: AI Accelerating Intrusion Playbooks
Threat actors are leveraging AI to refine and accelerate traditional attack chains, lowering the barrier to entry for complex operations.