Browsing Tag
Cloud Security
2 posts
Cloud security, runtime defense, cloud-native exposure, workload protection, and incident response coverage.
Januscape KVM Flaw Turns Nested Virtualization Into a Host-Escape Risk
CVE-2026-53359, dubbed Januscape, is a 16-year-old Linux KVM shadow MMU flaw that can let a guest VM crash, and potentially escape to, an x86 host when nested virtualization is exposed. Operators should treat it as a hypervisor-boundary patch event, not a routine kernel update.
JadePuffer Shows Agentic Ransomware Has Moved From Theory to Logs
Sysdig says JadePuffer is the first documented ransomware operation driven end to end by an AI agent. The intrusion used a known Langflow flaw, harvested cloud and API secrets, pivoted into Nacos, and left defenders with a new problem: autonomous attack behavior that is fast, adaptive, and strangely detectable.