Technology ❯ Cloud Computing

Cloud Security

Vulnerabilities Cybersecurity Data Protection Identity Management Credential Management Threat Detection Secrets Management Threats Data Management Cybersecurity Solutions

Gitea Docker Authentication Bypass Probed in the Wild

The bug lets anyone who can reach an exposed container set a single HTTP header to impersonate users and access code and secrets.

LLM Agent JadePuffer Runs First Documented Ransomware Operation

AI Agent 'JadePuffer' Carried Out Fully Autonomous Ransomware Operation

Massive Password-Spray Flood Targets Azure CLI, Compromises Dozens

Dawnguard Publicly Launches Security Architecture Automation Platform After New Pre‑Seed Raise

Attackers Exploit SimpleHelp OIDC Flaw to Deploy TaskWeaver and Djinn Stealer

Amazon Q Bug Allowed Malicious Repositories to Run Code and Steal Cloud Credentials

CrowdStrike Unveils Continuous Identity for AI Agents

Microsoft Disables Dozens of GitHub Repos After Credential‑stealing Code Targeted AI Coding Tools

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

TrapDoor Malware Hits npm, PyPI and Crates.io to Steal Developer Secrets

Security and Compliance Vendors Wire Claude Telemetry into Enterprise Controls

Pwn2Own Berlin Uncovers 47 Zero‑Days, Awards $1.3 Million

Researcher’s Exploits Revive MiniPlasma Bug and Flag BitLocker Bypass in Windows

Datadog Soars After Q1 Beat, Raised Outlook and FedRAMP High Clearance

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

CrowdStrike Launches Project QuiltWorks to Fix AI-Discovered Software Risks

Mosyle Uncovers Two Undetected macOS Threats Targeting Developer and Cloud Credentials

Meta Halts Work With Mercor After Breach Tied to LiteLLM Supply-Chain Attack