Modal Customer Workload Compromised in AI Attack
Modal-hosted customer workloads were compromised during the AI agent attack, with agents using forged tokens to download private files. The incident underscores…
Tag: Cloud Security
How to Build Security Operations Ready for AI-Powered Attacks
Security teams are facing a new reality where AI-powered attacks accelerate the discovery and exploitation of vulnerabilities, leaving defenders with less time…
Wazuh and AI For Enhanced SOC Workflows
Artificial Intelligence (AI) is transforming Security Operations Centers (SOCs) by automating repetitive tasks, uncovering patterns in large datasets, and accelerating decision-making. Modern…
Microsoft Entra ID Critical RCE Flaw (CVE-2026-69836) Exploited in the Wild, No Customer Action Required
Microsoft has disclosed a maximum-severity remote code execution vulnerability in its cloud-based identity and access management service, Microsoft Entra ID (formerly Azure…
Cloudflare Workers Spectre Attack Leaks JWT at 12 Bits Per Second
Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker…
One Attacker Scrapes Salesforce and ServiceNow Portals Since 2025
A single threat actor has been systematically scraping data from Salesforce and ServiceNow customer portals for over a year, according to research…
SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild Days After Patch
A maximum-severity vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, is now being actively exploited in the wild, just days after SAP…
SAP Commerce Cloud Critical Flaw CVE-2026-58231 Allows Unauthenticated RCE
SAP has released patches for a maximum-severity vulnerability in Commerce Cloud (Data Hub Adapter) that could allow unauthenticated attackers to execute arbitrary…
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has disclosed a maximum-severity zero-day vulnerability in its business intelligence and data visualization software that is being actively exploited in the…
TeamPCP Linked to Redis Attacks Dating Back to 2020 and Later Supply Chain Campaign
A new analysis by Oligo Security has uncovered that the threat actor known as TeamPCP has been active in the cybercrime scene…