§Topic · Cloud Security110 dispatches

Cloud Security

Cloud misconfigurations, IAM failures, AWS/Azure/GCP incidents, and security issues across Kubernetes and container platforms.

Monday, August 3

Brinks Home Data Breach Exposes Millions of Records
Premium
Brinks Home confirms breach after ShinyHunters claims nearly five million Salesforce records were stolen, exposing customer data.
Aug 3·cybersecuritynews.com
data breaches cloud security cybersecuritynews.com
CareCloud Data Breach Compromises Over 350,000 Records
Premium
CareCloud breach exposed personal, financial, and medical data of over 350,000 records from AWS environment compromise.
Aug 3·securityweek.com
data breaches cloud security securityweek.com
Azure Cosmos DB Vulnerability Puts Data at Risk: What You Need to Know
Premium
CosmosEscape exposed primary keys for Azure Cosmos DB, granting attackers full read/write access to affected databases.
Aug 3·securityweek.com
cve & vulnerabilities cloud security securityweek.com

Friday, July 31

Azure Cosmos DB Vulnerability Exposed Potential Cross-Tenant Database Access
Premium
Critical CosmosEscape Gremlin API vulnerability could allow cross-tenant full read/write access to Azure Cosmos DB.
Jul 31·thehackernews.com
cve & vulnerabilities cloud security thehackernews.com

Monday, July 27

Critical Azure Automation Vulnerability Risks Cross-Tenant Identity Exposure
Premium
Default Azure Automation public-by-default configuration combined with code flaws could enable cross-tenant identity takeover and data access.
Jul 27·darkreading.com
cve & vulnerabilities cloud security darkreading.com

Friday, July 24

Invisible Comments in Azure DevOps Pose AI Security Threat
Premium
Azure DevOps MCP flaw allows invisible PR comments to prompt-inject AI code review agents, leaking repository content to attackers.
Jul 24·thehackernews.com
cve & vulnerabilities cloud security ai & llm security thehackernews.com

Monday, July 20

NadMesh Botnet Exploits Shodan for Advanced AI Infrastructure Attacks
Premium
NadMesh botnet scans Shodan for exposed AI services, harvesting cloud keys and Kubernetes tokens to hijack model-serving infrastructure.
Jul 20·cybersecuritynews.com
malware cloud security ai & llm security cybersecuritynews.com

Wednesday, July 15

Sophisticated OAuth Client ID Spoofing Tactics Threaten Microsoft Entra Security
Novel OAuth client ID spoofing enables attackers to validate stolen Microsoft Entra credentials and enumerate accounts while evading telemetry.
Jul 15·thehackernews.com
cloud security identity, access & credentials thehackernews.com

Monday, July 13

CISA Reveals Lessons from AWS Credential Exposure Incident
Premium
CISA publishes after-action lessons following contractor exposure of AWS GovCloud credentials and IaC repos on public GitHub.
Jul 13·cybersecuritynews.com
data breaches cloud security policy, regulation & enforcement cybersecuritynews.com

Friday, July 10

Cybercriminals Exploit Microsoft Entra Passkey System to Breach Corporate Accounts
Premium
Threat group O UNC 066 uses phone-based phishing to trick employees into registering attacker-controlled Entra passkeys to hijack accounts.
Jul 10·cybersecuritynews.com
phishing & social engineering data breaches apt & threat actors cybersecuritynews.com

Get these articles delivered to your inbox.