SecurityWeek
NEWS · ALERTS · RESEARCH
Cloud security
Industry reporting, official advisories and security research, collected in one place. Headlines link to the original publisher.
29 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
SecurityWeek
$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws ↗
Industry newsCISA Cybersecurity Advisories
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers ↗
Agency · CISACISA News
CISA and NIST Release Guidelines to Protect Federal Cloud Identity Systems from Token Theft, Forgery, and Misuse ↗
Agency · CISAThe Hacker News
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers ↗
Industry newsSecurityWeek
Three JFrog Artifactory Flaws Exploited for Backdoor Deployment ↗
Industry newsThe Hacker News
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data ↗
Industry newsThe Hacker News
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV ↗
Industry newsBleepingComputer
Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent ↗
Industry newsThe Hacker News
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure ↗
Industry newsBleepingComputer
Artifactory flaws chained in attacks deploying backdoor malware ↗
Industry newsThe Hacker News
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors ↗
Industry newsThe Hacker News
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws ↗
Industry newsThe Hacker News
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware ↗
Industry newsThe Hacker News
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories ↗
Industry newsBleepingComputer
AI-powered attack exploited PaperCut flaws to hack 395 organizations ↗
Industry newsThe Hacker News
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE ↗
Industry newsThe Hacker News
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline ↗
Industry newsMicrosoft Security Research
Threat matrix: Mapping threats across cloud web applications ↗
ResearchMicrosoft Security Research
Passkey-themed social engineering leads to identity and cloud compromise ↗
ResearchThe Hacker News
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days ↗
Industry newsChannelPro
5 ways MSPs can protect identity integrity during cloud transitions ↗
Industry newsChannelPro
Microsoft SharePoint Server flaw exploited in ransomware attacks ↗
Industry newsThe Hacker News
Your Cloud Security Checklist Doesn't Work the Way You Think It Does ↗
Industry newsKrebsOnSecurity
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia ↗
Industry newsCIS / MS-ISAC
A Vulnerability in VeloCloud Orchestrator (VCO) On-Prem Could Allow for Remote Code Execution ↗
Threat sharingCERT-EU
2026-009: Critical Vulnerabilities in Microsoft SharePoint ↗
AgencyKrebsOnSecurity
Microsoft Patches a Record 570 Security Flaws ↗
Industry newsCERT-EU