One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
The Hacker NewsAug 18, 2026SaaS Security / Cloud Security A single piece of infrastructure has been pulling records out of...
Cloud
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
Ravie LakshmananAug 15, 2026Vulnerability / Cloud Security A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts....
Apple Photos Privacy Case Advances, With Up to $32.5 Billion Alleged Exposure
Court clears path for multibillion-dollar Apple biometric privacy lawsuit. The iPhone maker is facing a potential $32.5 billion class-action lawsuit...
Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Today’s Most Sophisticated Threats
Recognition highlights Proofpoint's deep technical integration with Google Cloud Security solutions and commitment to helping organizations protect people, data and AI Helps...
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
Swati KhandelwalJul 30, 2026Vulnerability / Cloud Security A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape...
China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
Swati KhandelwalJul 23, 2026Malware / Threat Intelligence An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks...
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
Ravie LakshmananJul 22, 2026AI Security / Cloud Security OpenAI on Tuesday said a combination of its artificial intelligence (AI) models,...
Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
Ravie LakshmananJul 21, 2026Vulnerability / Cloud Security Apple has moved to address a security flaw in its Hide My Email...
AWS Billion-Dollar Software Bug Explained
A runaway cloud bill can trigger instant panic. For some Amazon Web Services (AWS) customers, that panic arrived in the...
Claude for Chrome Flaw Puts Gmail at Risk From Rogue Extensions
A security flaw in Anthropic’s Claude for Chrome could allow a malicious browser extension to trigger Gmail, Google Docs, and...
Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
Ravie LakshmananJul 01, 2026Password Security / Cloud Security Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack"...
Anthropic Launches Claude Tag, Bringing AI Agents Into Slack
Claude is no longer waiting patiently in a separate chat window. Anthropic now wants teams to bring its AI assistant...
Alibaba Cloud Bets on France as Europe Seeks More Control Over AI
Europe wants more control over the infrastructure behind AI, and Alibaba Cloud wants a bigger role in that market. The...
