Tag: cloud security
Azure Cosmos DB bug could have unlocked every tenant database
Wiz found a chain it calls CosmosEscape that let a crafted Gremlin query grab a platform-wide master key.
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
New NadMesh botnet hunts exposed AI services for cloud credentials
Researchers discovered the NadMesh botnet, which targets exposed AI infrastructure to steal cloud keys and Kubernetes tokens.
Grok Build uploaded entire Git repositories to xAI cloud storage
A security researcher found that xAI's Grok Build CLI packaged and uploaded entire code repositories, including deleted secrets, to Google…
Progress orders ShareFile customers to shut down storage zone servers
Progress Software told ShareFile customers to power down on-premises Storage Zone Controllers over an undisclosed security threat.
First agentic ransomware autonomously hacks network and demands payment
Sysdig documents the first confirmed agentic ransomware operation to autonomously complete the full attack chain.
CISA contractor accidentally leaks AWS credentials on personal GitHub account
A CISA contractor accidentally exposed AWS access keys and admin credentials on a personal GitHub account, sparking a major security…
AWS Unveils Continuum for Automated Code Vulnerability Lifecycle
AWS's new Continuum service automates the entire code vulnerability lifecycle from discovery through remediation using frontier AI models, shifting from…