Tag: cloud
-
Surf AI Adds Claude Compliance Integration and Exposure Reduction Operations
Surf AI has added an integration with Claude’s Compliance API and made Exposure Reduction Operations generally available, extending its platform to govern AI model connectivity alongside identity, cloud and SaaS exposures. The Claude integration pulls activity logs from an organization’s Claude environment, maps connection and access paths to an accountable owner in Surf’s Context Graph,..…
-
Suppliers, logins, and AI tools are all becoming attack paths
Cybercriminals and state-backed hacking groups are abusing trusted identities, cloud services, AI tools, and software supply chains to gain access while avoiding detection, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/06/crowdstrike-cyber-threat-trends-report/
-
Cloud Security Alliance Starts Initiative to Define Controls for Catastrophic AI Risks
The Cloud Security Alliance has launched an initiative to define auditable controls for catastrophic AI risks, along with a research center focused on how frontier AI is changing cybersecurity. Announced Wednesday in Las Vegas, the Catastrophic Risk Annex will extend CSA’s AI Controls Matrix with controls for mitigating catastrophic AI risks. CSA said the controls..…
-
Hybridansatz für umfassendere Schwachstellenerkennung: Checkmarx stellt Checkmarx Fusion vor
Neue Architektur kombiniert bewährte AppSec-Scan-Engines mit KI-gestützter Analyse und ermöglicht eine präzisere Schwachstellenerkennung über den gesamten Softwareentwicklungszyklus hinweg. Checkmarx, Anbieter für autonome, Cloud-native Anwendungssicherheit, stellt mit Checkmarx Fusion einen neuen hybriden Scan-Ansatz vor, der ab sofort im Rahmen eines Early-Access-Programms für Kunden verfügbar ist. Checkmarx Fusion kombiniert die bewährten AppSec-Scan-Engines und den proprietären Sicherheitskontext… First…
-
Flooding Dropper Hits npm With 850 Malicious Packages
Tags: attack, automation, cloud, container, control, credentials, cvss, data-breach, detection, dns, endpoint, github, guide, infrastructure, linux, macOS, malicious, malware, monitoring, software, threat, windows<div cla TL;DR Sonatype Research Labs is tracking an active malicious package campaign, dubbed ‘Flooding Dropper,’ spreading on npm, currently impacting 846 software components. The attacker appears to be automating parts of the npm account and package creation process, combining terms such as bigops and bnpl with other words and recurring version patterns, such as releases…
-
Canadian pleads guilty to Snowflake cloud data-theft attacks
A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing data from at least 165 organizations in a scheme to extort millions of dollars from victims. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/canadian-pleads-guilty-to-snowflake-cloud-data-theft-attacks/
-
Canadian man pleads guilty to Snowflake hacks that led to 165 breaches
A 26-year-old from Ontario faces as many as 32 years in prison after pleading guilty to fraud, identity theft and conspiracy charges related to the 2024 hacks of cloud platform Snowflake. First seen on therecord.media Jump to article: therecord.media/guilty-plea-snowflake-hack-connor-riley-moucka
-
Mini Shai-Hulud npm Attack: More Than 2,200 Components Impacted
Tags: access, ai, attack, breach, cloud, container, control, credentials, data, data-breach, github, guide, infection, intelligence, kubernetes, malicious, malware, microsoft, open-source, risk, sbom, service, software, threat, update<div cla TL;DR A new wave of the Shai-Hulud malicious package campaign emerged on npm, with 2,225 software component versions impacted. The malware executes through a malicious preinstall hook, steals npm, GitHub, cloud, Kubernetes, Vault, CI/CD, and other credentials, then uses stolen publishing access to compromise additional packages. Organizations that installed an affected version should…
-
7AI Launches Federated SIEM and Build Tools Ahead of Black Hat USA 2026
7AI has launched 7AI Federated SIEM and 7AI Build, two capabilities designed to give security teams a distributed foundation for AI-assisted operations. The company said both will be showcased at Black Hat USA 2026. 7AI Federated SIEM connects to security data across existing SIEMs, data lakes and cloud platforms. It lets teams query, investigate and..…
-
XM Cyber Releases Open-Source Tools for Hunting macOS and Oracle Cloud Exposures
XM Cyber has announced new open-source exposure-hunting tools for macOS endpoints and Oracle Cloud Infrastructure. The release, issued from Black Hat USA and DEF CON, says the tools are intended to help security teams uncover and validate complex attack paths. The macOS tool examines weaknesses that can allow an attacker to move from an initial..…
-
Beacon CRM, Widely Used by Charities, Suffers Data Breach
English National Ballet is Among the Confirmed Victims Notifying Supporters. Cloud-based customer relationship management software provider Beacon CRM said it’s suffered a security breach that likely led to the theft of customer data. Over 1,000 charities use the software, and English National Ballet and the Centre for Sustainable Energy report they’ve been affected. First seen…
-
CrowdStrike Warns AI Adoption Is Creating ‘Underdefended’ Attack Surfaces
CrowdStrike warns that AI adoption, rapid vulnerability exploitation, cloud attacks, and malicious npm packages are creating new enterprise security risks. The post CrowdStrike Warns AI Adoption Is Creating ‘Underdefended’ Attack Surfaces appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-crowdstrike-ai-underdefended-attack-surfaces/
-
Menlo Security Extends MARS to Protect AI Assistants and Coding Agents
Menlo Security has expanded Menlo Agent Runtime Security, or MARS, with controls aimed at protecting AI assistants and coding agents from prompt injection, malware and data loss as they browse the web, use applications and process files. The company is highlighting the update at Black Hat USA 2026. MARS is a cloud-based capability in Menlo’s..…
-
Optiv Debuts Agentic Security Operations, Overhauling Its Managed Detection Service
Optiv unveiled Optiv Agentic Security Operations on Wednesday at Black Hat USA 2026, a major expansion of its managed security services and a substantial overhaul of the offering formerly known as Optiv MDR. The new service combines Google Security Operations technology, already central to the prior offering, with deeply integrated cloud and AI security capabilities..…
-
From Inspection to Authorization: Securing Networks for AI Agents
Tags: access, ai, api, business, ceo, cloud, communications, control, crowdstrike, cryptography, data, encryption, endpoint, finance, firewall, identity, infrastructure, login, network, office, risk, saas, service, usa, vpn<div cla An Industry Perspective By Rajiv Pimplaskar, CEO, Dispersive Holdings, Inc. Agentic AI changes the network security problem from inspection to authorization. As more traffic is generated by agents, models, and workloads operating at machine speed, the network has to make trust decisions continuously, evaluate policy in real time, revoke access automatically, and keep…
-
Why Cloud Misconfigurations Continue to Cause Data Breaches in 2026
Just like a physical lock, a mistake when setting up a cloud service is usually hidden. You will typically only become aware of the mistake after a security incident. The provider is not responsible for the customer’s mistakes. This is called the ‘shared responsibility model.’ AWS, Azure, and Google Cloud all provide a secure operation,……
-
Interview mit Seppmail ESicherheit in der Cloud
E-Mail-Infrastrukturen in der Cloud sind einfacher zu managen und sicherer. Allerdings so Dirk Lather, Partner- & Key Account Manager bei Seppmail, im Remote-Interview mit Netzpalaver, müssen dazu einige Parameter und gesetzliche Regularien berücksichtigt werden. Welche dies aktuell sind und wie sich die Sicherheit von E-Mail und insbesondere E-Mail-Security in der Cloud weiterentwickelt und auf was…
-
Keyfactor will Cofide übernehmen, um verifizierte Identitäten für KI-Agenten und Cloud-Workloads bereitstellen zu können
Keyfactor gibt seine Absicht bekannt, das in Großbritannien beheimatete Unternehmen Cofide, eine Identitätsplattform, die Software-Workloads und KI-Agenten in modernen Cloud-Umgebungen schützt, zu übernehmen. Durch die Übernahme wird die Keyfactor-Trust-Control-Plane auf Workloads und KI-Agenten ausgeweitet werden. Sicherheitsteams werden über ein einziges System verfügen, mit dem sie unternehmensweit nicht-menschliche Identitäten verwalten und steuern können werden. Unternehmen setzen zunehmend…
-
Menlo Security Extends Platform Reach to AI Agents
Menlo Security today at the Black Hat USA conference extended its cloud platform to secure artificial intelligence (AI) agents at runtime by sanitizing the web pages and files they read to neutralize prompt injection attacks and block data exfiltration. Company CEO Bill Robbins said the Menlo Agent Runtime Security (MARS) platform created to isolate browsers..…
-
C5-Type-1-Testat des BSI bestätigt die Sicherheit von <> für Organisationen mit hohen Anforderungen an Cloud-Sicherheit
Extreme Networks gibt bekannt, dass <> das BSI-C5-Type-1-Testat nach dem Cloud-Computing-Compliance-Criteria-Catalogue (C5) des Bundesamts für Sicherheit in der Informationstechnik (BSI) erhalten hat. Damit erfüllt die branchenweit einzige KI-gestützte All-in-One-Cloud-Networking-Plattform einen der strengsten staatlich unterstützten Cloud-Sicherheitsstandards Europas. Das BSI-C5-Type-1-Testat bestätigt unabhängig, dass Extreme-Platform-One die Anforderungen an sichere und regelkonforme Cloud-Netzwerkinfrastrukturen für stark regulierte Organisationen erfüllt […] First…
-
Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
Kali365 is turning a legitimate Microsoft login into a gateway to corporate data.The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft’s real authentication page. Once access and refresh tokens are issued, attackers may retain access to email, documents, and cloud resources, creating a direct path to data exposure, financial…
-
Microsoft Warns Russian Hackers Use Hotel Wi-Fi to Steal Credentials
Microsoft warns Russian hackers are exploiting hotel Wi-Fi to deliver malware, steal credentials, and compromise corporate travelers’ cloud accounts worldwide. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/news-microsoft-russian-hackers-hotel-wifi/
-
Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time. First seen on hackread.com Jump to article: hackread.com/shai-hulud-npm-worm-poisoning-1280-packages/
-
Worm Targets More Than 2,000 npm Package Versions
Attackers Compromised Keyv and Cacheable Source or Release Credentials. A self-replicating npm worm linked by tradecraft to Shai-Hulud has compromised more than 2,000 versions of 444 packages, stealing cloud and CI credentials and using exposed publisher tokens to spread through trusted dependencies. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/worm-targets-more-than-2000-npm-package-versions-a-32412
-
Six Flowise Vulnerabilities Enable Remote Code Execution on AI Workflow Servers
Six newly disclosed vulnerabilities in Flowise, a popular open”‘source platform for building AI agents and LLM workflows, allow unauthenticated and low”‘privileged attackers to achieve remote code execution (RCE) on self”‘hosted and cloud AI workflow servers running vulnerable versions. These flaws collectively expose organizations to full server compromise, data exfiltration, and AI pipeline manipulation if instances…
-
Cloud and SaaS Environments Now Top Targets for Attackers
Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/
-
Cloud Management Changes Operations. Policy Governance Keeps Security in Control.
Cloud-delivered management platforms have transformed how organizations operate their security infrastructure. Tasks that once required managing individual devices can now be centralized, automated, and executed at scale. For security teams… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/cloud-management-changes-operations-policy-governance-keeps-security-in-control/
-
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we’ve seen bad actors leveraging cloud-based AI. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/keep-going-bro-youve-got-this-a-data-driven-look-at-how-adversaries-are-weaponizing-ai/
-
Veeam bringt Cloud-Archiv für Cold Data und langfristige Backup-Aufbewahrung
Cloud statt Tape: Veeam führt Vault Archive für ältere Backups, Cold Data und ROT-Daten ein. Die neue Cloud-Archivklasse verspricht unveränderliche Langzeitspeicherung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/veeam-bringt-cloud-archiv-fuer-cold-data-und-langfristige-backup-aufbewahrung/a45984/