NadMesh Botnet Targets Exposed AI Services for Cloud Credentials and Kubernetes Tokens
A new Go-based botnet named NadMesh has been discovered actively hunting exposed AI services to steal cloud credentials and Kubernetes tokens. First…
Tag: Cloud Security
Unpatched Shark Vacuum Flaws Expose Millions to Remote Code Execution via AWS IoT Misconfiguration
A security researcher publishing under the handle tokay0 has disclosed an unpatched vulnerability in SharkNinja's Shark robot vacuum cleaners that could allow…
SASE Has an AI Blind Spot: Why Packet Inspection Falls Short in Modern Enterprise Security
For years, routing traffic through cloud proxies was sufficient for enterprise security. However, the shift to browser-based work, SaaS applications, and generative…
Qualys: Cloud-Based Vulnerability Management
Qualys offers cloud-based vulnerability management, policy compliance, and web application scanning solutions, used in the article as an example of a vulnerability…
SAP Patches Critical CVSS 9.9 NetWeaver ABAP Flaw Allowing Data Exposure or Modification
SAP has released its July 2026 security updates, addressing multiple vulnerabilities including a critical out-of-bounds write flaw in SAP NetWeaver Application Server…
RabbitMQ Flaws Expose OAuth Secrets and Cross-Tenant Queue Metadata
Cybersecurity researchers at Miggo have disclosed two access control vulnerabilities in the RabbitMQ message broker that could allow attackers to leak OAuth…
Microsoft Entra ID: Identity and Access Management Service
Microsoft Entra ID (formerly Azure Active Directory) is a cloud-based identity and access management service. It was affected by CVE-2026-69836, a critical…
OAuth Client ID Spoofing Exploits Blind Spot in Microsoft Entra ID to Validate Stolen Credentials
Proofpoint has uncovered a novel evasion technique called OAuth client ID spoofing, exploited by at least two threat actors to validate stolen…
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
Security researcher cereblab discovered that xAI's Grok Build coding CLI (version 0.2.93) was uploading entire Git repositories—including full commit history—to a Google…
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths Swati KhandelwalJul 14, 2026SaaS Security / Identity Security Attackers whose methods line…