Cloud Security
Sola Security AI Agent Downgrades 58.5% of High-Severity Cloud Findings
Research shows static severity ratings from cloud security platforms often misrepresent actual risk in production environments.
Cloud Security
Everything Threat Times has reported about Cloud Security: 25 stories, newest first. Part of our Vulnerabilities coverage.
Cloud Security
Yandex Cloud Status Page Confirms Third Data Center Outage in Ongoing Incident
Yandex Cloud has logged a third data center outage, marking the latest disruption in a series of infrastructure incidents affecting its cloud services.
Cloud Security
AWS AgentCore security flaws expose credentials via metadata and weak VM isolation
Analysis reveals that AWS AgentCore’s security model is undermined by metadata token transmission, weak virtual machine isolation, and overly expansive permissions.
Cyber Attacks
Nikkei confirms two employee cloud accounts compromised, used to send mass phishing
The Japanese media giant disclosed unauthorized access to staff accounts, with one leveraged to distribute thousands of phishing messages.
Vulnerabilities
AWS patches two vulnerabilities in Ops Wheel affecting cloud infrastructure
Amazon Web Services released security bulletins for CVE-2026-6911 and CVE-2026-6912, addressing issues in its Ops Wheel service.
Vulnerabilities
AWS Issues Security Bulletins for CVE-2026-11400 and CVE-2026-11401
Amazon Web Services has published advisory details for two new vulnerabilities, identified as CVE-2026-11400 and CVE-2026-11401, requiring immediate attention.
Vulnerabilities
AWS Issues Security Bulletin for Research and Engineering Studio Issues
Amazon Web Services has published a security bulletin addressing issues within its Research and Engineering Studio service.
Vulnerabilities
AWS Issues Security Bulletin for Amazon Athena ODBC Driver Vulnerabilities
Amazon Web Services has released a security bulletin addressing issues within the Amazon Athena ODBC Driver, urging users to review their configurations.
Vulnerabilities
AWS Updates Security Bulletin on Copy.fail Malware and Related Variants
Amazon Web Services has issued an ongoing advisory regarding the Copy.fail malware campaign, detailing detection methods and mitigation strategies for cloud customers.
Vulnerabilities
AWS Issues Security Bulletin for CVE-2026-31431
Amazon Web Services has published a new security bulletin addressing vulnerability CVE-2026-31431, providing initial guidance for customers.
Vulnerabilities
AWS Addresses Insecure File Permissions Vulnerability in Command Line Interface
The cloud provider issued an advisory for CVE-2026-13769, citing insecure file permissions that could expose sensitive data in the AWS CLI.
Cloud Security
Microsegmentation FAQ: Architecture, Policy, and Enforcement Details
Microsegmentation isolates workloads at the application layer, ensuring that compromised credentials cannot automatically grant access to adjacent systems.
Cloud Security
Cloud Misconfiguration Response: Containment, Recovery and Prevention Steps
Immediate isolation of the affected resource prevents lateral movement, while preserving logs before cleanup ensures accurate root cause analysis for future prevention.
Cloud Security
Cloud Identity Governance: Definition, Mechanics, and Common Pitfalls
Identity governance shifts security from perimeter defense to continuous verification of who accesses what and why, preventing silent privilege creep.
Cloud Security
Service Mesh Security: Answers to Eight Critical Questions
A service mesh encrypts traffic between services but cannot verify the integrity of the application code running inside those services.
Cloud Security
Cloud Security Groups: Definition, Purpose, and Common Pitfalls
Security groups enforce stateful packet filtering at the virtual network interface, creating an invisible perimeter that moves with your workload rather than sitting at a fixed network edge.
Cloud Security
SASE vs SSE: How to Choose the Right Cloud Security Architecture
Secure Access Service Edge includes network functions while Secure Service Edge focuses only on application security, creating distinct operational costs.
Cloud Security
Service Account Security Checklist for Cloud Infrastructure
Static credentials on long-lived service accounts create persistent backdoors that bypass human-led identity controls and survive employee turnover.
Cyber Attacks
Asos Admits Cloud Data Breach After Hackers Alert Users via Push Notification
The online retailer confirmed customer data was exposed after attackers sent a notification claiming full access to its cloud infrastructure.
Vulnerabilities
Patched AWS Bedrock AgentCore Flaw Allowed Single Prompt Takeover
A vulnerability dubbed 'AgentCorruption' in AWS Bedrock AgentCore allowed attackers to compromise entire AI fleets with one prompt.
Vulnerabilities
OpenStack Mistral Fixes Command Injection in SSH Proxy Action
A high-severity flaw in OpenStack Mistral allows authenticated users to execute arbitrary commands on executor hosts via the ssh_proxied action.
Vulnerabilities
Microsoft Patches High-Severity Azure API Center Info Disclosure Vulnerability
An unauthenticated attacker can exploit CVE-2026-83943 to steal sensitive data from Azure API Center via network access.
Vulnerabilities
Azure App Service Has Critical Remote Code Execution Flaw
Microsoft confirms a missing authentication flaw in Azure App Service allows unauthorized remote code execution.
Cyber Attacks
Palo Alto Unit 42 Reports Web3 Infrastructure Used in Cloud Supply Chain Attacks
Researchers detail how threat actors exploit Web3 tools and open-source components to breach enterprise cloud environments.