Tag: cloud security
Canonical ships fixes for a flawed cloud trust check
A client-authentication weakness in LXD and MicroCloud scores a maximum CVSS 10.0 and lets an attacker borrow a trusted identity…
Thousands of live Gitee secrets include an AI platform admin key
A month-long scan of 7.25 million Chinese repositories produced 26,400 credentials that still authenticated when tested.
Genesys intruders reached CRM and training tools, leaving customer contacts exposed
The call centre platform vendor contained an October break-in that exposed account data held in a learning system and a…
Stolen GitHub tokens are printing private repo secrets into build logs
Wiz traced 13,500 rogue branches across 850 compromised GitHub accounts, each planted with a workflow that encodes repository secrets into…
Nikkei says a dev cloud account handed over 1.83 million records
A reused password and a development cloud tenant cost Nikkei 150,000 people their personal details.
Malformed packets carry a KVM guest straight into the host
A 9.3-rated hypervisor escape needs only a few bad IPv4 packets from a guest, and the kernel fix is landing…
Hijacked backup app tokens opened 173 Microsoft 365 tenants
Microsoft says a compromised ConnectWise Cloud Backup OAuth application let an intruder mint access tokens across 173 customer tenants.
PwnEscape lets a VM guest slip past the Linux kernel boundary
The flaw surfaced during a million-dollar sandbox challenge and now carries stable-branch fixes.