Wiz Research
Wiz Research discovered and reported the Amazon Q Developer flaw, demonstrating the attack vector and coordinating with Amazon for the fix.
Tag: Cloud Security
Automated Pentest Gaps: What Your Report Misses and How to Fix It
Automated penetration testing is a staple of security validation, but a clean report may create a false sense of security. This article,…
Sygnia: Incident Response and Cyber Resilience
Sygnia is an incident response and cyber resilience company that reported on an AI-assisted cloud attack against an AWS environment, highlighting the…
Splunk Cloud: Cloud-Based SIEM and Observability
Splunk Cloud is the cloud version of Splunk Enterprise. It is not affected by CVE-2026-20253 because it does not use PostgreSQL sidecars.
Google Vertex AI SDK Flaw Allows Attackers to Hijack Model Uploads via Bucket Squatting
A critical flaw in the Google Cloud Vertex AI SDK for Python has been discovered that could allow an attacker with no…
OX Security: Cloud-Native Application Security Platform
OX Security is a cybersecurity company that provides a cloud-native application security platform. It was involved in the discovery of the compromised…
Salesforce: Cloud-Based Software Company
Salesforce is an American cloud-based software company that disabled the Klue Battlecards app integration after detecting OAuth token abuse leading to unauthorized…
Shadow AI’s Real Threat Is Access Control, Not Data Leakage
The cybersecurity landscape is shifting as Shadow AI evolves from a data leakage concern to a critical access control problem. According to…
Token Security: AI-First Security for AI Agents
Token Security is an AI-first security company that helps organizations discover, understand, and enforce what AI agents can do across every platform.…
DifyTap Vulnerabilities Expose AI Chat Data Across Tenants in Open-Source Platform Dify
Cybersecurity researchers at Zafran Security have disclosed four vulnerabilities in Dify, an open-source agentic workflow platform with over 146,000 GitHub stars, collectively…