Skip to main content
25 storiesin cloud-security
AWS Fixes Command Injection Vulnerability in Amazon Agent Plugins
cloud-securityvia Amazon Web Services (AWS), Security Bulletins

AWS Fixes Command Injection Vulnerability in Amazon Agent Plugins

AWS has fixed CVE-2026-107322, an OS command injection vulnerability affecting databases-on-aws plugin versions 1.0.0 through 1.7.0. Users should upgrade to version 1.7.1 or later and verify that the patched plugin is active.

3 days ago6 min read
Cloudflare Workers Adds ML-KEM and ML-DSA Support for Post-Quantum CryptographyTrending
cloud-securityvia Cloudflare Blog

Cloudflare Workers Adds ML-KEM and ML-DSA Support for Post-Quantum Cryptography

Cloudflare Workers now supports ML-KEM and ML-DSA through Web Crypto, giving developers native building blocks to test and integrate post-quantum cryptography without bundling separate implementations.

10 days ago7 min read
AWS Details Post-Merger Cloud Foundation Built in Four Days for a U.S. BankTrending
cloud-securityvia AWS for Industries

AWS Details Post-Merger Cloud Foundation Built in Four Days for a U.S. Bank

AWS describes how a U.S. bank established a governed cloud organization four days after a merger closed, enabled a nine-service security baseline in under 10 minutes, and vended its first workload accounts after 42 days.

14 days ago12 min read
Cloudflare Fixes Cross-Tenant Data Exposure Vulnerability in ContainersTrending
cloud-securityvia Cloudflare Blog

Cloudflare Fixes Cross-Tenant Data Exposure Vulnerability in Containers

Cloudflare says it fixed a Containers vulnerability that could expose residual storage data between customers. The flaw involved Linux thin provisioning and disabled block zeroing. The company found no evidence of malicious exploitation.

17 days ago8 min read
AWS Shows How to Transform Bedrock Guardrails Events Into OCSF With CloudWatchTrending
cloud-securityvia AWS Security Blog

AWS Shows How to Transform Bedrock Guardrails Events Into OCSF With CloudWatch

AWS has published a reference implementation for transforming Amazon Bedrock Guardrails intervention events into OCSF Detection Findings and storing them in the CloudWatch unified data store for cross-source security analysis.

20 days ago8 min read
Microsoft Discloses Critical CVSS 10 Azure AI Foundry Privilege Escalation FlawTrending
cloud-securityvia Microsoft Security Response Center

Microsoft Discloses Critical CVSS 10 Azure AI Foundry Privilege Escalation Flaw

Microsoft has disclosed CVE-2026-85889, a critical Azure AI Foundry elevation-of-privilege vulnerability caused by missing authentication for a critical function. Microsoft says the issue is fully mitigated and requires no customer action.

23 days ago7 min read
AWS European Sovereign Cloud: How to Build a Secure Landing ZoneTrending
cloud-securityvia AWS Security Blog

AWS European Sovereign Cloud: How to Build a Secure Landing Zone

AWS has outlined a security architecture for building landing zones in its European Sovereign Cloud, covering partition-aware infrastructure, governance, identity, logging, networking, data protection, CI/CD, and incident response.

25 days ago11 min read
Google Cloud's GKE Agent Sandbox Helps SeaVerse Cut Infrastructure Costs by 60%Trending
cloud-securityvia Google Cloud Blog

Google Cloud's GKE Agent Sandbox Helps SeaVerse Cut Infrastructure Costs by 60%

SeaVerse says Google Kubernetes Engine (GKE) Agent Sandbox has helped reduce infrastructure costs by up to 60%, while improving workload visibility, isolation and flexibility for its AI-powered interactive creation platform.

25 days ago8 min read
Google Details How It Tracks AI Threats and Builds AI DefensesTrending
cloud-securityvia Google Cloud Blog

Google Details How It Tracks AI Threats and Builds AI Defenses

Google Cloud says AI is changing cybersecurity across software development, attack surfaces and threat capabilities. Its latest CISO perspective outlines how Google monitors these shifts and applies AI, threat intelligence and automation to defense.

25 days ago9 min read
Google Cloud Adds Granular Session Controls for Cloud AccessTrending
cloud-securityvia Google Cloud Blog

Google Cloud Adds Granular Session Controls for Cloud Access

Google Cloud has expanded Session Controls with Terraform, gcloud and REST API support, Google Groups targeting, application-specific policies and Google Cloud Console management in preview.

26 days ago5 min read
Cloudflare CASB Adds Automatic Remediation Policies for SaaS Security FindingsTrending
cloud-securityvia Cloudflare Blog

Cloudflare CASB Adds Automatic Remediation Policies for SaaS Security Findings

Cloudflare CASB now lets security teams automatically respond to SaaS security findings with supported remediation actions, webhooks, or both, reducing the need for manual intervention.

30 days ago6 min read
Beyond Database Migration: How to Replicate SQL Server Logins and Users to Cloud SQLTrending
cloud-securityvia Google Cloud Blog

Beyond Database Migration: How to Replicate SQL Server Logins and Users to Cloud SQL

Migrating SQL Server databases to Google Cloud can leave applications unable to authenticate. Here is how sp_help_revlogin helps preserve SQL logins, password hashes and SIDs during Cloud SQL migrations.

about 1 month ago7 min read