Cloud security

Mastering Cloud Security: Your Resource for Infrastructure Protection, Compliance, Zero Trust, and More.

Microsoft SharePoint app seen in App Store on the screen of ipad and blurred finger pointing at it.

SharePoint vulnerability steals machine keys; fourth recent exploit

Steve ZurierJuly 22, 2026

New SharePoint flaw exploited as attackers steal machine keys for lasting access.

Today's Top Cloud Security Headlines

Cloud Security News

Critical ServiceNow AI flaw exploited days after patch release

Steve ZurierJuly 20, 2026

Attackers exploit critical ServiceNow AI bug just days after security patch release.

Holographic visualization of a multi-cloud environment showcasing hybrid cloud solutions

Linux bug dormant for 16 years can cause a VM escape

Steve ZurierJuly 7, 2026

A single compromised hypervisor can grant root privileges over the server.

Cloud Visibility, Fortibleed, hacking things the easy way – Sandy Bird – PSW #932

June 25, 2026

First up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure! This segment is sponsored by Sonrai Security. Visit https://securityweekly.com/sonrai to learn more about them! Next up in the security news: Help, I am Fortibleeding, Cisco SD-WAN needs help, The secret life of probe requests, Help, I am Squidbleeding, XSS to RC...

Magnifying glass red bug bounty, green binary code, identify and submit vulnerability reports

ServiceNow says security researchers, not hackers, accessed data

Steve ZurierJune 10, 2026

ServiceNow investigates access issue, says no attacker activity found.

Vulnerability Management

Most organizations that miss 24-hour patch window report breaches

Steve ZurierJune 2, 2026

Study points out that AI has shattered the model of patching on a two- to four-week schedule.

Microsoft Teams website on a tablet. Teams is a unified team communication and collaboration platform with workplace chat, video meetings, and file storage.

UNC6692 impersonates help desk employees to drop SNOW malware via Teams

Steve ZurierApril 24, 2026

Attackers abuse Teams chat to deliver malware after help desk phishing scam.

A glowing red cloud icon with an exclamation mark sits on a dark circuit board, symbolizing critical cloud computing error or data risk.

AI-driven cloud attacks reach ‘functional’ maturity, says Unit 42

Steve ZurierApril 23, 2026

PoC proves that attackers can leverage AI to exploit cloud weaknesses at machine speed.

(Adobe Stock)

Application security

Microsoft 365 mailbox rules abused for exfiltration, persistence

Steve ZurierApril 13, 2026

Attackers abuse Microsoft 365 mailbox rules to hide activity, steal data, and persist after password resets.

(Adobe Stock)

Actor tied to Raccoon targets ‘several dozen’ companies by exploiting BPOs and helpdesks

Steve ZurierApril 9, 2026

Google says UNC6783 leverages social engineering and phishing campaigns to gain entry to the BPOs.

BSides SF: SaaS, cloud assets vulnerable to identity-based ransomware attacks

Paul WagenseilMarch 28, 2026

It's easy to mount ransomware attacks upon SaaS and cloud assets, a researcher said at the BSides SF 2026 hacker conference.

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Cloud Security Events