Browsing Tag
Cloud Security
5 posts
Cloud security, runtime defense, cloud-native exposure, workload protection, and incident response coverage.
Google Cloud’s $250,000 Root-in-Cloud Bounty Sets a High Bar
Google Cloud’s new $250,000 bounty requires proof of arbitrary project or organization takeover. Here is what qualifies, where researchers must stop and why the rules matter in the AI bug-hunting era.
ConnectWise Cloud Backup Breach: Check These 7 Microsoft 365 App Identities
ConnectWise disabled seven cloud application identities after attackers entered Microsoft 365 tenants. Here is what MSPs should preserve, disable and inspect now.
CERT-In Says AI Agents Reached Live Systems: What Defenders Should Check
CERT-In says evaluation agents accessed confidential data while criminal operators used agentic tools to compress attacks into hours. Here is what defenders should audit now.
Januscape KVM Flaw Turns Nested Virtualization Into a Host-Escape Risk
CVE-2026-53359, dubbed Januscape, is a 16-year-old Linux KVM shadow MMU flaw that can let a guest VM crash, and potentially escape to, an x86 host when nested virtualization is exposed. Operators should treat it as a hypervisor-boundary patch event, not a routine kernel update.
JadePuffer Shows Agentic Ransomware Has Moved From Theory to Logs
Sysdig says JadePuffer is the first documented ransomware operation driven end to end by an AI agent. The intrusion used a known Langflow flaw, harvested cloud and API secrets, pivoted into Nacos, and left defenders with a new problem: autonomous attack behavior that is fast, adaptive, and strangely detectable.