Cloud Security

CISA warns threat actors are actively exploiting a critical MLflow flaw to steal cloud credentials and internal data.

Active exploitation of MLflow SSRF (CVE-2026-64849) leads to cloud credential and secret theft from ML deployments.

Metabase zero-day impacted Salesforce and ServiceNow portals, exposing long-running data leakage and authentication bypass risk to enterprise tenants.

Compromised Azure/Entra credentials exfiltrated employee directories from major corporations, data now offered for sale.

CopyEscape (CVE-2026-17106) allows malicious docker cp operations to overwrite host files and potentially achieve root execution.

Malware running in a signed Windows session can quietly use Windows Hello for Business keys to authenticate to Entra ID and persist.

Researcher demonstrated a PoC providing C2-style influence over ChatGPT's isolated sandbox, highlighting container escape risks.

Agent infrastructure flaws at AWS, Google, and Vercel allow forged instructions to invoke agent tools without model authorization, bypassing guardrails.

Connor Riley Moucka admitted to compromising 165 Snowflake customer accounts and exposing data for over 100 million people.