GitLost Attack: Public GitHub Issue Tricks AI Agents Into Leaking Private Repo Data
Researchers at Noma Security have demonstrated a novel prompt injection attack, dubbed GitLost, that exploits GitHub Agentic Workflows to leak private repository…
Tag: Cloud Security
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The…
AI Agent JADEPUFFER Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
Massive Azure CLI Password Spray Attack Compromises 78 Microsoft Accounts Across 64 Organizations
Cybersecurity researchers at Huntress have uncovered a massive, ongoing automated password spray attack targeting Microsoft's Azure command-line interface (CLI). The campaign, active…
Azure AI Foundry: Microsoft’s Platform for AI Model Access
Azure AI Foundry provides private preview access to MDASH with MAI-Cyber-1-Flash for approved customers. It is Microsoft's platform for deploying and managing…
Microsoft Defender for Cloud Security
Defender for Cloud offers security monitoring and threat protection for cloud environments, including AI agent activities.
Sysdig: Cloud Security and Threat Research
Sysdig researchers discovered and analyzed the ENCFORGE ransomware campaign, linking it to the JADEPUFFER operator. Published technical details including binary hashes, C2…
Mustang Panda Abuses Zoho WorkDrive as Command Channel in Indian Government Attacks
The China-aligned espionage group Mustang Panda is running two campaigns against Indian government and hydropower targets, deploying new malware and turning a…
AWS Static Access Keys Enable Cloud Compromise
In the CISA red team assessment, static AWS access keys with no expiration and no token revocation allowed the red team to…
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer could allow a malicious repository to execute commands and steal a developer's cloud credentials. The…