Hugging Face Breached by Autonomous AI Agent in First-of-Its-Kind Attack
Hugging Face, the world's largest open-source AI model repository, disclosed a security breach perpetrated by an autonomous AI agent system. The attack…
Tag: Cloud Security
Critical NGINX Heap Buffer Overflow CVE-2026-42533 Allows DoS and Potential RCE
F5 has patched a critical heap buffer overflow vulnerability in NGINX, tracked as CVE-2026-42533, which can crash worker processes and may allow…
NadMesh Botnet Targets Exposed AI Services for Cloud Credentials and Kubernetes Tokens
A new Go-based botnet named NadMesh has been discovered actively hunting exposed AI services to steal cloud credentials and Kubernetes tokens. First…
Unpatched Shark Vacuum Flaws Expose Millions to Remote Code Execution via AWS IoT Misconfiguration
A security researcher publishing under the handle tokay0 has disclosed an unpatched vulnerability in SharkNinja's Shark robot vacuum cleaners that could allow…
SASE Has an AI Blind Spot: Why Packet Inspection Falls Short in Modern Enterprise Security
For years, routing traffic through cloud proxies was sufficient for enterprise security. However, the shift to browser-based work, SaaS applications, and generative…
Qualys: Cloud Security and Compliance Solutions
Qualys is a leading provider of cloud-based security and compliance solutions, including vulnerability management, policy compliance, and web application scanning. They discovered…
SAP Patches Critical CVSS 9.9 NetWeaver ABAP Flaw Allowing Data Exposure or Modification
SAP has released its July 2026 security updates, addressing multiple vulnerabilities including a critical out-of-bounds write flaw in SAP NetWeaver Application Server…
RabbitMQ Flaws Expose OAuth Secrets and Cross-Tenant Queue Metadata
Cybersecurity researchers at Miggo have disclosed two access control vulnerabilities in the RabbitMQ message broker that could allow attackers to leak OAuth…
Microsoft Entra ID: Cloud Identity and Access Management Service
Microsoft Entra ID is a cloud-based identity and access management service. The article describes a blind spot in its sign-in telemetry that…
OAuth Client ID Spoofing Exploits Blind Spot in Microsoft Entra ID to Validate Stolen Credentials
Proofpoint has uncovered a novel evasion technique called OAuth client ID spoofing, exploited by at least two threat actors to validate stolen…