Cloud Security
Cloudflare Is Building Its Own Certificate Authority to Harden the Web Against Quantum Computers
The internet infrastructure giant wants to issue its own digital trust certificates, buying a head start from GlobalSign and promising post-quantum protection before most of the web even knows it needs it.
Microsoft Publishes a Cloud Web App Attack Playbook and Names the Weak Spots Nobody Wants to Own
Microsoft's new threat matrix organises how attackers actually break into cloud-hosted web apps, from forgotten DNS records to Kudu consoles left facing the internet.
Microsoft fixes a perfect-10 flaw in Azure AI Foundry that let strangers take control
A missing authentication check in Microsoft's flagship AI development platform earned the rare CVSS 10.0 rating. Microsoft patched it on its side, but the bug says a lot about how fast AI services are shipping.
Chainguard Hits 1 Billion Container Build Manifests: What the Numbers Mean for Software Supply Chain Security
The secure container specialist doubled its output in six months. What's interesting is the machinery behind the number, not the number itself.
The Google Workspace apps you forgot about are still reading your email
Third-party integrations left connected to Workspace tenants keep their access for years, and attackers are quietly walking through the door they left open.
Microsoft is moving Teams and Microsoft 365 to new web addresses, here is what your IT team needs to do
Both services are redirecting to new cloud.microsoft domains by early October. Businesses need to update firewall and network settings now, or users could lose access.
DDRop: A Tiny Circuit Bolted to a Server Can Fool Intel and AMD's Most Secure Modes
Researchers show how a small piece of hardware, paired with attacker software already on the machine, tricks confidential computing into reading stale data as if it were fresh.
Human Hacker Breaks Out of Marimo Notebook and Hits SSH Bastion in Eight Seconds
Sysdig researchers watched a skilled attacker chain a Marimo flaw into deeper cloud access almost instantly, showing humans can move as fast as AI.
What to do in the first hours of a Google Workspace breach
A new webinar walks through real incidents inside Google Workspace and the early choices that either contain the damage or make it worse.
Cloud Security Isn't One Problem. It's Three.
A new Intruder study of 3,000 organisations finds AWS, Azure, and Google Cloud fail in different ways, and one checklist won't catch them all.
Microsoft Cloud Fixes, 5,000 Dropbox Accounts Hijacked, and a $1.1 Billion Security Startup: This Week's Briefing
Microsoft patched flaws in its cloud platform, criminals walked into roughly 5,000 Dropbox accounts via a signup flaw, and browser-security firm Guardio hit a $1.1 billion valuation.
Attackers Hijacked Coder's Cloudflare Setup to Push Poisoned Terraform Modules
For 14 hours on August 31, some developers pulling from Coder's official registry got credential-stealing code instead of the real thing.
Microsoft Defender for Office 365 is blocking Google search links by mistake
A faulty security classification inside Safe Links is flagging normal Google URLs as malicious, and copy-pasting them into a browser does not help.
Securing Cloud Assets Amidst AI Challenges
Cloud misconfiguration is still how most breaches start. AI is making the problem harder to contain and easier to exploit.
Microsoft Exchange Online buckles: email delays, sign-in errors hit tens of thousands
Microsoft says it has spotted a shared authentication fault behind a widespread Exchange Online outage causing missing emails and login failures.