Cybersecurity researchers at Huntress have uncovered a massive, ongoing automated password spray attack targeting Microsoft's Azure command-line interface (CLI). The campaign, active…
Defender for Cloud offers security monitoring and threat protection for cloud environments, including AI agent activities.
Sysdig calculated that stolen AI credentials could run up more than $46,000 a day in AI charges, highlighting the financial risk of…
The China-aligned espionage group Mustang Panda is running two campaigns against Indian government and hydropower targets, deploying new malware and turning a…
A high-severity flaw in Amazon Q Developer could allow a malicious repository to execute commands and steal a developer's cloud credentials. The…
Wiz Research discovered and reported the Amazon Q Developer flaw, demonstrating the attack vector and coordinating with Amazon for the fix.
Automated penetration testing is a staple of security validation, but a clean report may create a false sense of security. This article,…
Splunk Cloud is the cloud version of Splunk Enterprise. It is not affected by CVE-2026-20253 because it does not use PostgreSQL sidecars.
Google Workspace is a cloud-based productivity suite that includes email, collaboration, and administrative tools. In this campaign, UNC6508 abused its content compliance…
A critical flaw in the Google Cloud Vertex AI SDK for Python has been discovered that could allow an attacker with no…