Cloud platforms, services, and infrastructure
Found 53 articles
Criminals are reselling stolen model credentials through proxy services, with some attacks driving cloud and token charges near $1 million.
Certified test results put WAAP security and false positive rates under sharper scrutiny. These three questions can help buyers compare coverage, operations and cost.
Lumen’s report details a fast, rotating attack network aimed at management systems, and why defenders need to focus on access and behavior.
Cohere reported a rare attempted outbound request by Alibaba’s Qwen model, highlighting the need to constrain and monitor enterprise AI agents.
Storm-0940 used stolen ConnectWise cloud app credentials and ARTEX to automate Microsoft 365 sign-in attempts at machine speed.
Weakly generated eMudhra keys exposed eight intermediate authorities. Chrome and Firefox blocked them as organizations review certificates and trust stores.
Attackers are turning trusted cloud tools into channels for control, data theft and disruption, putting identity and management permissions at the center of defense.
A compromised ConnectWise credential was used to access Microsoft 365 tenants, prompting service suspensions and urgent customer-side reviews.
A recent zero-day vulnerability in BeyondTrust’s Remote Support software has raised alarms, allowing attackers to gain root access and control over user systems.
Recorded Future's new AI Infrastructure Indicator Lists empower organizations to effectively track and manage AI-related network traffic, addressing hidden security risks.
While many websites are adopting post-quantum cryptography, true enterprise readiness demands more than just front-end measures.
AWS faces ongoing vulnerabilities in autonomous agents, revealing inherent security challenges that demand careful management from enterprise IT leaders.
Microsoft's release of WSL containers streamlines Linux development on Windows, eliminating common integration challenges for developers.
Jadepuffer, an autonomous AI attacker, has infiltrated Azure, targeting resources and raising alarms about identity security and response strategies.
Enhancing ransomware defense through threat intelligence allows organizations to identify risks before attacks escalate, minimizing potential damage.
A serious vulnerability in the VeloCloud Orchestrator allows remote attacks, necessitating urgent patches for affected versions to prevent exploitation.
Z.ai disables its ZCode coding assistant's feature after it inadvertently uploaded user code to cloud servers, sparking major security concerns.
Revoking access tokens may not suffice to eliminate threats; new strategies for incident response are essential against evolving cloud-based attacks.
Recent probing of Vite servers for cloud credentials underlines significant security vulnerabilities in the JavaScript ecosystem, with urgent updates needed.
Exaforce enhances its AI Security tool to monitor a wider range of AI agents, leveraging existing security telemetry for more effective threat detection.