Cloud Security

Cybersecurity 7 min A Stolen Key Spent US$600,000 and No Invoice Ever Arrived An attacker took an API key from a researcher's personal server and spent US$600,000 of inference credits over... KE Kenji Tanaka 2 Sep Cyber Threat Intel 8 min Attackers Are Using MLflow To Ask The Cloud For Its Own Credentials CVE-2026-64849 is an unauthenticated server-side request forgery in MLflow scoring 9.3. Two days after disclos... PR Priya Nair 22 Aug Cybersecurity 8 min Microsoft Fixed a Perfect-10 Entra ID Flaw Before Telling Anyone It Was Exploited CVE-2026-69836 scores 10.0, needs no account and no user interaction, and was exploited in the wild. Microsoft... KE Kenji Tanaka 22 Aug Cybersecurity 10 min Singapore Will Hold Infrastructure Boards Accountable for Recovery, Not Just Defence CSA said on 22 July that the rewritten Code of Practice will require critical-infrastructure boards to maintai... KE Kenji Tanaka 21 Aug Cloud & Infra 8 min The Breach Was at the Vendor. The Notification Came From Everyone Else. Valve, Framework and a football club all told customers about a breach this week. None of them was broken into... KE Kenji Tanaka 10 Aug Cyber Threat Intel 7 min The Snowflake Extortionist Pleaded Guilty. The Way In Was Still Just a Password. Connor Riley Moucka, 26, pleaded guilty on 6 August over the campaign that took data from more than 165 organi... CY Cyber Team 9 Aug Cybersecurity 6 min An LLM Agent Drove This Real Intrusion: Marimo RCE to Database Dump in Under an Hour On 10 May an internet-exposed marimo notebook was breached through CVE-2026-39987 — and then an autonomous LLM... CY Cyber Team 30 May Cybersecurity 7 min CISA Orders Federal Agencies to Patch Linux Kernel "Copy Fail" Zero-Day Within Two Weeks A 732-byte Python script is all an unprivileged local user needs to take root on Ubuntu 24.04, RHEL 10.1, SUSE... CY Cyber Team 18 May