Cloud Security News

Security news for cloud platforms and services: misconfigurations, vulnerabilities and incidents affecting AWS, Azure, GCP and SaaS providers.

Cloud security incidents increasingly stem from misconfiguration and identity or access failures as much as from classic software vulnerabilities, now that so much infrastructure runs on shared platforms. Vulnerabilities, misconfig-driven exposures and incidents affecting major cloud providers and SaaS services land here.

Recent Cloud items

CVE-2026-126793 An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0) and before release 2026-07-29 (awssql/v2.0....
@cveNotify · Nov 12, 2026
CVE-2026-126793 An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0) and before release 2026-07-29 (awssql/v2.0....
@cveNotify · Nov 12, 2026
Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams https://ift.tt/WwaDT3P
@ctinow · Nov 12, 2026
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, an...
@bleepingcomputer · Nov 12, 2026
CVE-2026-123082 Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were b...
@cveNotify · Nov 12, 2026
CVE-2026-12708 Summary Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3 DATAGRAM handling. For every previously unseen flow identifier (qua...
@cveNotify · Nov 12, 2026
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide https://ift.tt/nogO1Jz
@ctinow · Nov 12, 2026
CVE-2026-127119 Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas (awswrangler) from 1.1.0 before 3.18.0 might allow remote actors to read Amazon EMR clu...
@cveNotify · Nov 12, 2026
CVE-2026-100307 Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might allow an authenticated remote user to assign the registry administrator s...
@cveNotify · Nov 12, 2026
CVE-2026-127119 Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas (awswrangler) from 1.1.0 before 3.18.0 might allow remote actors to read Amazon EMR clu...
@cveNotify · Nov 12, 2026
CVE-2026-124653 The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attacke...
@cveNotify · Nov 12, 2026
CVE-2026-111038 CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-controlled data, such as event...
@cveNotify · Nov 12, 2026
CVE-2026-111037 A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The vulnerability arises because the `list_item_function` paramet...
@cveNotify · Nov 12, 2026
CVE-2026-111036 Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available in the ‘Contracts > Templat...
@cveNotify · Nov 12, 2026
CVE-2026-126330 Docker Sandboxes can silently republish a sandbox service after an operator removes its automatically assigned host-port mapping. The daemon removes the active binding but retains the...
@cveNotify · Nov 12, 2026
CVE-2026-126329 Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointin...
@cveNotify · Nov 12, 2026
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry https://ift.tt/MRL8nhw
@ctinow · Nov 12, 2026
Two critical Red Hat Quay flaws (CVSS 9.8 & 9.9) expose private container images to theft and tampering. One flaw lets attackers read or overwrite ALL private images in a registry — no account needed...
@thehackernews · Nov 12, 2026
CVE-2026-86504 In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution 🎖
@cveNotify · Nov 12, 2026
CVE-2026-86503 In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching 🎖
@cveNotify · Nov 12, 2026
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs https://ift.tt/7wd8CLf
@ctinow · Nov 12, 2026
CVE-2026-124653 The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attacke...
@cveNotify · Nov 12, 2026
Google Cloud warns of 3 security flaws in AMD EPYC Turin CPUs that could leak sensitive data inside VMs. C4D, N4D, H4D, Z4D and G4 instances are affected. and... a simple reboot won't fix it. What cus...
@thehackernews · Nov 12, 2026
CVE-2026-126644 A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component (os....
@cveNotify · Nov 12, 2026
CVE-2026-126643 A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret (Secret/-resource-serv...
@cveNotify · Nov 12, 2026
CVE-2026-126641 A host key verification flaw was found in ansible-pylibssh and in the ansible.netcommon libssh connection plugin. When trust-on-first-use is enabled (host_key_auto_add on the libssh co...
@cveNotify · Nov 12, 2026
CVE-2026-111434 Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c. This...
@cveNotify · Nov 12, 2026
CVE-2026-111433 UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue...
@cveNotify · Nov 12, 2026
Critical Red Hat Quay Vulnerability Could Expose Private Container Images https://ift.tt/BMlkD1o
@ctinow · Nov 12, 2026
CVE-2026-126642 An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemp...
@cveNotify · Nov 12, 2026

Other topics

CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds: new IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches: what was exposed, which organizations were affected, and how the incident came to light.
Exploit
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.