Cyber CrimeNewn0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
> Search
30 results for “cloud security”
Cyber CrimeNew
SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
Cyber CrimeRansomware Hits Japanese Cloud Serving 495 Orgs
IDC Frontier says a ransomware attack on its IDCF Cloud disrupted East Japan Region 1 and locked 495 companies and local governments out of management consoles.
CloudAWS Agent Flaws Expose Control Gap
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
SecurityWhy identity dark matter hides in plain sight
The Hacker News explains how unregistered accounts and machine credentials keep IAM blind spots open across cloud estates.
SecurityOne Week, Nine Flaws, No Easy Fix
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
SecurityDefense Cyber Spending Set to Double
MarketsandMarkets projects the cyber warfare market will grow from $14.99bn in 2026 to $28.75bn by 2031, driven by attacks on military systems.
SecurityLiteLLM's Default Admin Key Exposed
A Wiz Research scan found 294 exposed LiteLLM gateways accepted the example admin key sk-1234, granting access to stored provider credentials.
SecurityAI agents rewrite cloud security rules
Autonomous AI attackers can chain cloud misconfigurations at machine speed, forcing CISOs to rethink defense.
SecurityNIST Flags Multi-Cloud Security Pitfalls
New NIST report outlines 23 unique challenges in multi-cloud environments, urging community-driven solutions.
SecurityAI Assistance Moves Into SOC Workflows
Wazuh adds AI-powered analyst tools and integrations to ease security operations workload.
SecurityAzure Tenant Data Theft Hits Fortune 500 Firms
A threat actor is selling millions of records allegedly stolen from Azure tenants of major companies.
Cyber CrimeAitM Phishing Targets Financial Data
A sophisticated phishing campaign uses adversary-in-the-middle tactics to compromise Microsoft 365 accounts for financial espionage.
SecurityBrowser Security Gaps in the AI Era
The shift toward browser-based workflows and AI tools is revealing significant vulnerabilities in traditional network security.
SecurityOligo Secures $60M for Runtime Security
The Tel Aviv-based security firm reaches a $140 million total funding milestone to scale its application and cloud workload protections.
Cyber CrimeCloud and SaaS Now Primary Attack Targets
A new report identifies a strategic shift among threat actors, moving away from simple malware toward identity and trust-based exploits.
SecurityOkta Targets Identity Security Expansion
Okta plans to acquire Permiso Security to bolster its identity threat detection capabilities within multi-cloud environments.
SecurityMaintenance Bug Triggers Cloud Outage
A routine network update error disrupted Microsoft 365 and Azure services, prompting a full review of automated maintenance systems.
SecurityAzure App Service Privilege Escalation Flaw
A newly identified critical vulnerability in Azure App Service permits unauthorized network-based privilege escalation.
SecurityNadMesh Botnet Turns AI Tools Into Hooks
A newly identified Go-based botnet is pivoting from simple compute-hijacking to harvesting cloud credentials from exposed AI services.
SecurityThe Hidden SaaS Risk to Enterprise Data
Modern security programs are failing to see deep inside SaaS platforms, leaving sensitive data exposed through quiet misconfigurations.
SecurityShark Vacuum Flaw Exposes Root Access
A configuration oversight in SharkNinja's AWS integration allows unauthorized remote commands on connected robot vacuums.
SecurityWhy SASE Architectures Face New Hurdles
Modern internet protocols and the rise of AI workflows are challenging the effectiveness of traditional network-centric security.
TrendingEvaluating 2026 Cloud Security Priorities
A look at the professional discourse surrounding cloud and data security strategies slated for discussion this July.
SecurityThe Silent OAuth Exploit Bypassing Cloud Identity Defenses
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.
SecurityBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
Cyber CrimeAI Gateways Face New Threats as Attackers Pivot to Cryptomining
Researchers have identified a new vector where cloud-hosted AI infrastructure is being hijacked for illicit cryptocurrency operations.
SecurityWhen Internal Missteps Expose Critical Cloud Infrastructure
A contractor's exposed repository forced a rapid internal incident response at CISA to secure sensitive cloud credentials.
SecurityMastering Entra ID Defense Through Gamified Simulation Training
Varonis Threat Labs launches an interactive capture-the-flag experience to teach security teams how to combat modern identity attacks.
SecurityCloud Authentication Under Siege: The Rise of OAuth ID Spoofing
A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.