The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Ivanti has revealed that a newly patched security flaw in its Cloud Service Appliance (CSA) has come under active exploitation in the wild.The high-severity vu…
Numerous security vulnerabilities riddled the privacy of ownCloud users that the vendor patched recently. Exploiting…Multiple Vulnerabilities Found In ownCloud…
VMware is warning of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protect…
As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even t…
Researchers found a critical vulnerability in the Google Cloud Build that allowed elevated privileges to…A Google Cloud Build Vulnerability Could Aid Supply-Ch…
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…
IBM has fixed a high-severity security vulnerability affecting its Cloud Databases (ICD) for PostgreSQL product that could be potentially exploited to tamper w…
A security researcher found severe cross-site scripting (XSS) vulnerabilities in Google Cloud and Google Play.…Researcher Found XSS Flaws In Google Cloud and G…
Severe security vulnerabilities in the Fujitsu cloud storage system exposed backups to unauthenticated attackers. Specifically,…Fujitsu Cloud Storage Vulnerabi…
Researchers discovered a significant security vulnerability in the Spring Cloud Function allowing code injection attacks.…Code Injection Vulnerability Found In…
Western Digital has recently addressed a critical security vulnerability affecting its My Cloud OS 5…Critical Vulnerability Affecting Western Digital My Cloud …
Researchers have disclosed three security vulnerabilities affecting Pascom Cloud Phone System (CPS) that could be combined to achieve a full pre-authenticated …
Multiple security flaws affected USB over Ethernet, which, in turn, affected numerous cloud services. These…Numerous Flaws In USB Over Ethernet Crippled Many C…
Threat actors are exploiting improperly-secured Google Cloud Platform (GCP) instances to download cryptocurrency mining software to the compromised systems as …
A security researcher has recently found a flaw in Google Cloud Project that allows for…Researcher Earns $10K Bounty For A Google Cloud Project SSRF Flaw on La…
Vulnerabilities in the life cycle of open-source software development can start from tiny crumbs but grow into substantial issues. This week's KubeCon + CloudN…
Cybersecurity researchers today disclosed details for a new vulnerability in VMware's Cloud Director platform that could potentially allow an attacker to gain …
Updated nextcloud packages fix security vulnerability: A bug in Nextcloud Server causes the workflow rules to depend their behavior on the file extension when…
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumen…
Users who can read logs or create Kubernetes resources could obtain Google Cloud credentials they are not allowed to read directly, according to two new report…
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on O…
Most administrators do not think about BIND, browser engines, or cloud kernels until one of them fails.
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
The Fedora 43 update for NextCloud version 34.0.3 addresses multiple security vulnerabilities including XSS and prototype pollution, enhancing the file sync an…