Cloud Security

Attackers Hijacked Coder's Cloudflare Setup to Push Poisoned Terraform Modules
For 14 hours on August 31, some developers pulling from Coder's official registry got credential-stealing code instead of the real thing.

Microsoft Defender for Office 365 is blocking Google search links by mistake
A faulty security classification inside Safe Links is flagging normal Google URLs as malicious, and copy-pasting them into a browser does not help.

Securing Cloud Assets Amidst AI Challenges
Cloud security is increasingly complex in the AI age. This article unpacks what enterprises should focus on to protect their assets.

Microsoft Exchange Online buckles: email delays, sign-in errors hit tens of thousands
Microsoft says it has spotted a shared authentication fault behind a widespread Exchange Online outage causing missing emails and login failures.

AI Agents Are Breaking Cloud Security Faster Than Human Hackers Ever Could
Automated attackers can test thousands of ways into a company's cloud systems in minutes. Most security teams are still thinking at human speed.

Nigeria Builds Its Own Cloud to Keep Its Data at Home
West Africa's biggest economy is setting up its own national cloud system, aiming to stop foreign governments from accessing Nigerian data and to make government computer systems harder to attack.

Chip Giants Are Racing to Build Quantum-Proof Encryption Into Hardware
Intel, Nvidia, and IBM are baking next-generation encryption into silicon before quantum computers can crack today's secrets. The window to act is already closing.

9,300 leaked AWS keys still work, and 768 hand over full control of a company's cloud
Truffle Security tracked exposed Amazon cloud keys for four years. Most were never rotated, and 88% still logged in on the day of testing.

Airlock Digital Passes Australia's Toughest Government Security Check
The Australian application control firm has cleared an independent IRAP assessment at PROTECTED level, giving government and critical-infrastructure buyers one more piece of evidence for their due-diligence files.

ChatGPT goes dark worldwide as OpenAI scrambles to fix login failures
A global outage starting late Wednesday locked users out of ChatGPT, Codex and a dozen OpenAI API endpoints.

Researchers pull a login token out of Cloudflare's edge with a browser-era ghost bug
A Spectre-style side-channel attack ran inside one Cloudflare Worker and quietly read data from another sitting on the same machine, at speeds fast enough to lift a JSON Web Token in seconds.

Hackers Are Actively Attacking MLflow and FUXA to Steal Cloud Secrets
Two open-source tools used by AI teams and factory operators are being scanned and broken into in the wild, with attackers using one flaw to grab cloud login keys.

Microsoft 365 search breaks for some users after botched deployment
A recent update inside Microsoft's own infrastructure hogged resources, leaving Outlook, SharePoint and OneDrive users unable to search their files and mail.

GitHub hit by widespread outage, breaking builds and logins for hours
The world's biggest code-sharing site started throwing errors on Monday morning, and developers everywhere felt it.

Azure Cloud Data Breach Affects Major Companies
Criminals steal data from well-known brands using leaked login details