Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
Cloud
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
Ravie LakshmananJul 01, 2026Password Security / Cloud Security Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack"...
Anthropic Launches Claude Tag, Bringing AI Agents Into Slack
Claude is no longer waiting patiently in a separate chat window. Anthropic now wants teams to bring its AI assistant...
Alibaba Cloud Bets on France as Europe Seeks More Control Over AI
Europe wants more control over the infrastructure behind AI, and Alibaba Cloud wants a bigger role in that market. The...
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
Ravie LakshmananJun 18, 2026Vulnerability / Cloud Security F5 has released security updates to address two critical security flaws in NGINX...
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
Ravie LakshmananJun 05, 2026Threat Intelligence / Cloud Security The threat actor known as PCPJack has hijacked cloud servers associated with...
US Firms Try DeepSeek as Silicon Valley AI Costs Rise
Some US companies are taking a closer look at China’s DeepSeek as the cost of Silicon Valley AI tools continues...
Microsoft Tests Wearable AI Badge for Office Workers
Microsoft is experimenting with AI hardware that office workers could wear like an access badge. At Microsoft Build 2026, the...
ShinyHunters Alleges 42M Records Stolen from Charter Communications
Voice phishing is becoming a cloud security problem, not just a help desk problem. Charter Communications confirmed a cybersecurity incident...
Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
Ravie LakshmananMay 20, 2026Supply Chain Attack / Cloud Security Grafana Labs, on May 19, 2026, said an investigation into its...
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
Ravie LakshmananMay 07, 2026Threat Intelligence / Cloud Security Cybersecurity researchers have disclosed details of a new credential theft framework dubbed...
Cloud Storage Scam Emails and Record-Breaking Fraud Losses: This Week in Scams
You open your inbox and see it: Your cloud storage is full. There’s a warning about photos being deleted, your account being suspended,...
Capability Deep Dive
The Two Control Gaps Oracle Risk Management Cloud (RMC) Can’t Provide: Mitigation, Monitoring, and Materialized Risk Detection Your Oracle environment...
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
Ravie LakshmananApr 29, 2026Vulnerability / Cloud Security In yet another instance of threat actors quickly jumping on the exploitation bandwagon,...
What Is Cloud Security? A 2026 Guide
Protecting assets and infrastructure in the cloud requires security specially designed for cloud platforms. Cloud security combines processes and technologies...
