OAST-Based Exploit Platform Targets 200 CVEs via Google Cloud Resources
Security researchers have uncovered a sophisticated exploit operation using a private Out-of-band Application Security Testing (OAST) service hosted on Google Cloud infrastructure.
The campaign...
Critical FluentBit Flaws Enable Remote Compromise of Cloud Environments
A newly disclosed chain of five critical vulnerabilities in Fluent Bit exposes cloud and Kubernetes environments to remote compromise, data tampering, and complete takeover...
Inside the Cloud where Pirated Apps Fuel a Maranhão Credential Stealer
A sophisticated information-stealing campaign leveraging pirated gaming software has been actively targeting users since May 2025, according to cybersecurity researchers at Cyble Research and...
New Threat – Microsoft Details Storm-0501’s Use of Cloud Platforms to Deliver Ransomware
Microsoft Threat Intelligence has released fresh research uncovering how financially motivated actor Storm-0501 has shifted away from traditional ransomware deployment to cloud-native ransomware operations.
Known for earlier...
Credential Heist – Cybercriminals Exploit ScreenConnect Cloud Admins in New Attack
A newly identified credential harvesting campaign, tracked as MCTO3030 by Mimecast’s Threat Research team, is targeting administrators of ConnectWise ScreenConnect cloud services in a highly orchestrated operation.
Active...