Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 121 stories in 24 hours
Cloud Security (AWS / Azure / GCP)
Microsoft, identity, cloud and the security operations centre.
11stories this week
2today
the last seven days
Most fromAWS Security Blog, Google Cloud, Dark Reading, Palo Alto Networks
In the news hereGoogle2Nvidia1ConnectWise1Kubernetes1
MyCyberWay trainingMost cloud breaches are configuration. Learn to get it right.See Blue Team Engineer
-
Every CSPM tool can hand you a list of resources and findings. Almost none of them can tell you what happens to the rest of your environment if any one of them gets compromised. Ask most cloud security teams whether they have visibility into their environment, and they’ll say yes. They have a CSPM tool,…
Cloud Security Alliance
-
Most cloud and security teams struggle with two fundamental questions: What is actually running across our clouds, and what is exposed? As workloads sprawl and AI models deploy faster than ever, critical …
Palo Alto Networks
-
As threat actors increasingly use AI to accelerate and develop cyberattacks, enterprise defenders need to rely on both AI and a critical defender’s advantage: Business context that only you possess. Enterprise cyber defense spans identity, network, endpoint, data, cloud, and application layers, often split across a dozen or more products, each with its own context.…
Google Cloud
-
We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.
Unit 42
-
Cloud Security Alliance is building industry consensus around governance and security controls for autonomous AI. We welcome the launch of the NVIDIA Open Agent Safety Platform and NVIDIA’s commitment to making autonomous AI safer to deploy at enterprise scale. NVIDIA is bringing its engineering capabilities across software and hardware to one of the most consequential…
Cloud Security Alliance
-
Smells like more agentic ransomware, Redmond warns…
The Register
-
On Saturday, October 24, 2026, we will conduct an exercise demonstrating that the AWS European Sovereign Cloud can operate without depending on any infrastructure outside of the European Union (EU). For several hours, the AWS European Sovereign Cloud will operate without a connection to the AWS Global Network backbone. The backbone is the private network…
AWS Security Blog
-
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
BleepingComputer
-
The “agentic threat actor” may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Dark Reading
-
Microsoft details Storm-3168, the JADEPUFFER-linked actor that used stolen service principals to delete Azure storage in minutes and harvest keys. Microsoft just published the first detailed look at what JADEPUFFER does inside Azure. Sysdig first spotted the group’s activity in July 2026 and called it the first documented agentic ransomware operation. Microsoft tracks the same…
Security Affairs
-
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor’s tradecraft. The attack took place in early June 2026 over a period of about 18…
The Hacker News
-
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
SecurityWeek
