Cloud Security News
Security news for cloud platforms and services — misconfigurations, vulnerabilities and incidents affecting AWS, Azure, GCP and SaaS providers.
Cloud security incidents increasingly stem from misconfiguration and identity/access failures as much as classic software vulnerabilities, given how much infrastructure now runs on shared platforms. This feed tracks vulnerabilities, misconfig-driven exposures and incidents affecting major cloud providers and SaaS services as they are reported. It is a fast-growing category as more of the attack surface moves off traditional on-prem infrastructure.
Recent Cloud items
CVE-2026-85596 Traefik versions >= v3.7.0 and
CVE-2026-69502 Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. 🎖
Other topics
CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds — new CVE IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases tracked as they are reported.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches — what was exposed, which organizations were affected, and how the incident came to light.
Exploit
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.