Cloud SecurityTruffle Security reveals 9,300+ valid AWS keys exposed online, including root keys that could grant full account control. Urgent revocation advised.
Cloud SecurityResearchers show how a Spectre attack on Cloudflare Workers steals a JWT at 12 bps via WebSockets and Durable Objects. See Cloudflare's countermeasures.
Cloud SecurityResearchers at the Ontinue Cyber Defense Center have identified TwinLoot, a modular malware framework written in Python that brings the living off the
Cloud SecurityThreema messaging service offline for hours due to DDoS attacks, affecting users and businesses. Upstream protection added for better security.
Cloud SecurityDiscover how Google Workspace breaches can start with OAuth token compromise, bypassing traditional email phishing, and learn risk mitigation strategies.
Cloud SecurityExplore TeamPCP's cyber activities from 2020, including Redis attacks and software supply chain compromises, with analysis of campaigns like ShadowRay 2.0.
Cloud SecurityUNC6671 vishing campaign targets personal phones to steal Microsoft 365 and Okta access, bypassing MFA defenses.
Cloud SecurityThe phishing-as-a-service platform Greatness , active since at least mid-2022, has expanded its campaigns targeting Microsoft 365 users. The activity
Cloud SecurityDevice code phishing exploits OAuth 2.0 to bypass MFA, even passkeys. Learn how automated kits are stealing tokens in millions of attacks globally.