https://cloudsecpulse.com/Security news, verified and fastenWed, 21 Oct 2026 16:23:35 +0000https://cloudsecpulse.com/c/cloud-security/connectwise-cuts-off-cloud-access-after-stolen/https://cloudsecpulse.com/c/cloud-security/connectwise-cuts-off-cloud-access-after-stolen/Wed, 21 Oct 2026 07:46:12 +0000Cloud SecurityConnectWise suspended Cloud Backup, SaaS Security, and Cloud Management after hackers used stolen app credentials to access Microsoft 365 tenants.https://cloudsecpulse.com/c/cloud-security/organizations-shift-to-torchtpu-for-native/https://cloudsecpulse.com/c/cloud-security/organizations-shift-to-torchtpu-for-native/Wed, 21 Oct 2026 06:12:34 +0000Cloud SecurityA new open-source backend replaces PyTorch/XLA, allowing organizations to run AI models on Google Cloud TPUs with minimal code changes.https://cloudsecpulse.com/c/cloud-security/ai-complicates-software-security-cisos-seek/https://cloudsecpulse.com/c/cloud-security/ai-complicates-software-security-cisos-seek/Tue, 20 Oct 2026 17:09:31 +0000Cloud SecurityA recent industry roundtable highlights how artificial intelligence introduces identity gaps in development, prompting leaders to prioritize visibility and collaboration.https://cloudsecpulse.com/c/cloud-security/london-cloud-failure-halts-revolut-payments-and/https://cloudsecpulse.com/c/cloud-security/london-cloud-failure-halts-revolut-payments-and/Tue, 20 Oct 2026 11:50:00 +0000Cloud SecurityA widespread Google Cloud outage in London disrupted dozens of services and forced fintech Revolut offline, highlighting how regional failures cascade to end users.https://cloudsecpulse.com/c/cloud-security/orgs-simplify-email-ecosystems-with-easydmarc-gmo/https://cloudsecpulse.com/c/cloud-security/orgs-simplify-email-ecosystems-with-easydmarc-gmo/Tue, 20 Oct 2026 06:37:42 +0000Cloud SecurityNew partnership helps organizations manage complex email ecosystems while displaying verified brand logos in recipient inboxes to build trust.https://cloudsecpulse.com/c/cloud-security/torchneuron-slashes-coding-hurdles-for-ai-devs-on/https://cloudsecpulse.com/c/cloud-security/torchneuron-slashes-coding-hurdles-for-ai-devs-on/Tue, 20 Oct 2026 05:10:33 +0000Cloud SecurityTorchNeuron reduces manual coding for AI workloads on Trainium2 and Trainium3 chips, lowering entry barriers for developers using AWS infrastructure.https://cloudsecpulse.com/c/cloud-security/connectwise-suspends-cloud-services-after/https://cloudsecpulse.com/c/cloud-security/connectwise-suspends-cloud-services-after/Mon, 19 Oct 2026 20:21:05 +0000Cloud SecurityConnectWise halted backup and management tools after attackers used a stolen credential to access Microsoft 365 tenants of managed service providers.https://cloudsecpulse.com/c/vulnerabilities/organizations-must-verify-exposure-before/https://cloudsecpulse.com/c/vulnerabilities/organizations-must-verify-exposure-before/Mon, 19 Oct 2026 13:32:45 +0000VulnerabilitiesAttackers are actively exploiting a command injection flaw in SiteGuard Server Edition to gain full system control. Organizations must verify exposure before patching.https://cloudsecpulse.com/c/data-breaches/contractor-breach-exposes-millions-of-california/https://cloudsecpulse.com/c/data-breaches/contractor-breach-exposes-millions-of-california/Mon, 19 Oct 2026 12:28:35 +0000Data BreachesUnauthorized access to an ETS file server compromised sensitive education data for millions of students, prompting state-led notification efforts.https://cloudsecpulse.com/c/cyber-attacks/fake-event-ticket-websites-and-how-to-spot-the/https://cloudsecpulse.com/c/cyber-attacks/fake-event-ticket-websites-and-how-to-spot-the/Mon, 19 Oct 2026 05:24:26 +0000Cyber AttacksFraudulent ticketing platforms often use legitimate payment processors to manufacture a false sense of security before stealing your money.https://cloudsecpulse.com/c/threat-intel/open-source-intelligence-investigations-a/https://cloudsecpulse.com/c/threat-intel/open-source-intelligence-investigations-a/Mon, 19 Oct 2026 04:18:15 +0000Threat IntelligencePublic data reveals hidden infrastructure connections that technical scans miss, allowing defenders to map adversary reach without triggering detection alarms.https://cloudsecpulse.com/c/vulnerabilities/arraytics-booktics-sql-injection-threatens-small/https://cloudsecpulse.com/c/vulnerabilities/arraytics-booktics-sql-injection-threatens-small/Sun, 18 Oct 2026 11:39:41 +0000VulnerabilitiesA critical SQL injection flaw in Arraytics Booktics versions up to 1.0.29 allows attackers to manipulate database queries and compromise sensitive information.https://cloudsecpulse.com/c/data-breaches/defenders-trace-yuankong-to-42-operators-via/https://cloudsecpulse.com/c/data-breaches/defenders-trace-yuankong-to-42-operators-via/Sun, 18 Oct 2026 05:21:38 +0000Data BreachesAnalysis of YuanKong droppers reveals embedded operator account identifiers, allowing defenders to trace builds to specific threat actors and identify C2 infrastructure.https://cloudsecpulse.com/c/vulnerabilities/organizations-face-urgent-risk-as-critical-drupal/https://cloudsecpulse.com/c/vulnerabilities/organizations-face-urgent-risk-as-critical-drupal/Sun, 18 Oct 2026 03:33:28 +0000VulnerabilitiesCritical remote code execution flaws in Drupal core and a contributed module require urgent updates across all supported versions before exploits spread.https://cloudsecpulse.com/c/vulnerabilities/embedded-devices-face-ipv6-and-dns-manipulation/https://cloudsecpulse.com/c/vulnerabilities/embedded-devices-face-ipv6-and-dns-manipulation/Sun, 18 Oct 2026 03:26:21 +0000VulnerabilitiesAWS patches two vulnerabilities in FreeRTOS-Plus-TCP that allow remote attackers to manipulate IPv6 routing and DNS resolution on embedded devices.https://cloudsecpulse.com/c/cyber-attacks/ransomware-gangs-spark-fires-and-spoil-food-by/https://cloudsecpulse.com/c/cyber-attacks/ransomware-gangs-spark-fires-and-spoil-food-by/Sun, 18 Oct 2026 02:47:06 +0000Cyber AttacksCriminals are targeting physical access controls and HVAC systems, creating real-world chaos to pressure executives into paying extortion demands.https://cloudsecpulse.com/c/data-breaches/anne-arundel-county-reviews-august-breach-for/https://cloudsecpulse.com/c/data-breaches/anne-arundel-county-reviews-august-breach-for/Fri, 16 Oct 2026 14:09:44 +0000Data BreachesMaryland officials verified that hackers stole files from government systems in August, prompting an investigation into exposed resident data.https://cloudsecpulse.com/c/cyber-attacks/federal-courts-face-delays-as-bae-cyber-probe/https://cloudsecpulse.com/c/cyber-attacks/federal-courts-face-delays-as-bae-cyber-probe/Fri, 16 Oct 2026 13:55:43 +0000Cyber AttacksA cybersecurity incident involving BAE Systems has taken down federal bankruptcy noticing systems, delaying electronic and paper notifications for courts nationwide.https://cloudsecpulse.com/c/vulnerabilities/automated-tools-at-risk-as-hidden-headers-trick/https://cloudsecpulse.com/c/vulnerabilities/automated-tools-at-risk-as-hidden-headers-trick/Fri, 16 Oct 2026 05:39:48 +0000VulnerabilitiesResearchers found sites using HTTP headers to send malicious instructions to AI agents, posing operational risks for businesses relying on automated web tools.https://cloudsecpulse.com/c/vulnerabilities/web-application-firewall-tuning-best-practices/https://cloudsecpulse.com/c/vulnerabilities/web-application-firewall-tuning-best-practices/Fri, 16 Oct 2026 00:57:07 +0000VulnerabilitiesUntuned web application firewalls block legitimate traffic while missing sophisticated attacks that mimic normal user behavior.https://cloudsecpulse.com/c/vulnerabilities/logging-library-vulnerabilities-debunking-5/https://cloudsecpulse.com/c/vulnerabilities/logging-library-vulnerabilities-debunking-5/Fri, 16 Oct 2026 00:31:18 +0000VulnerabilitiesLogging libraries often execute untrusted input as code, turning debug messages into remote execution vectors that bypass standard application firewalls.https://cloudsecpulse.com/c/vulnerabilities/windows-privilege-escalation-step-by-step/https://cloudsecpulse.com/c/vulnerabilities/windows-privilege-escalation-step-by-step/Thu, 15 Oct 2026 23:31:55 +0000VulnerabilitiesWindows privilege escalation exploits misconfigurations and code flaws to bypass security boundaries, allowing standard users to gain administrative control over the system.https://cloudsecpulse.com/c/vulnerabilities/secure-configuration-baselines-checklist-for/https://cloudsecpulse.com/c/vulnerabilities/secure-configuration-baselines-checklist-for/Thu, 15 Oct 2026 22:47:02 +0000VulnerabilitiesDefault settings prioritize ease of use over security, leaving hidden attack surfaces open to exploitation that require manual remediation.https://cloudsecpulse.com/c/vulnerabilities/wormable-vulnerabilities-10-faqs-on-self/https://cloudsecpulse.com/c/vulnerabilities/wormable-vulnerabilities-10-faqs-on-self/Thu, 15 Oct 2026 22:10:43 +0000VulnerabilitiesWormable flaws bypass user interaction entirely, allowing malware to spread across networks at machine speed without any human clicking a malicious link.https://cloudsecpulse.com/c/vulnerabilities/7-file-permission-mistakes-that-expose-your-data/https://cloudsecpulse.com/c/vulnerabilities/7-file-permission-mistakes-that-expose-your-data/Thu, 15 Oct 2026 21:34:04 +0000VulnerabilitiesMost data breaches start with misconfigured permissions that allow internal users or attackers to read files they should never access, turning simple settings into critical security gaps.https://cloudsecpulse.com/c/vulnerabilities/medical-device-vulnerability-response-steps-to/https://cloudsecpulse.com/c/vulnerabilities/medical-device-vulnerability-response-steps-to/Thu, 15 Oct 2026 20:56:11 +0000VulnerabilitiesDisconnecting medical devices from the network without proper isolation often causes greater operational harm than the vulnerability itself during an active incident.https://cloudsecpulse.com/c/vulnerabilities/host-header-injection-response-recovery-and/https://cloudsecpulse.com/c/vulnerabilities/host-header-injection-response-recovery-and/Thu, 15 Oct 2026 19:41:53 +0000VulnerabilitiesHost header injection exploits trust in server configuration, allowing attackers to manipulate email links and cache data without executing code on the server.https://cloudsecpulse.com/c/vulnerabilities/prevent-linux-kernel-privilege-escalation-top/https://cloudsecpulse.com/c/vulnerabilities/prevent-linux-kernel-privilege-escalation-top/Thu, 15 Oct 2026 19:08:05 +0000VulnerabilitiesHardening the kernel requires limiting user actions before they reach the core, because once code executes there, traditional security controls fail completely.https://cloudsecpulse.com/c/vulnerabilities/csaf-security-advisories-automate-patching/https://cloudsecpulse.com/c/vulnerabilities/csaf-security-advisories-automate-patching/Thu, 15 Oct 2026 18:26:30 +0000VulnerabilitiesCSAF advisories convert vendor noise into machine-readable data, allowing systems to prioritize fixes based on actual exposure rather than fear.https://cloudsecpulse.com/c/vulnerabilities/opnsense-vulnerability-lets-users-escalate-to/https://cloudsecpulse.com/c/vulnerabilities/opnsense-vulnerability-lets-users-escalate-to/Thu, 15 Oct 2026 15:40:53 +0000VulnerabilitiesA critical flaw in OPNsense firewalls allows privilege escalation through manipulated GeoIP data, requiring immediate updates to version 26.1.11.https://cloudsecpulse.com/c/vulnerabilities/saml-authentication-bypass-prevention-checklist/https://cloudsecpulse.com/c/vulnerabilities/saml-authentication-bypass-prevention-checklist/Thu, 15 Oct 2026 14:25:19 +0000VulnerabilitiesMisconfigured assertion validation allows attackers to forge valid identity tokens and access protected resources without proper credentials.https://cloudsecpulse.com/c/vulnerabilities/fortinet-ems-bypass-threatens-enterprise-endpoint/https://cloudsecpulse.com/c/vulnerabilities/fortinet-ems-bypass-threatens-enterprise-endpoint/Thu, 15 Oct 2026 10:00:51 +0000VulnerabilitiesPublic exploit code for a critical authentication bypass in FortiClient EMS allows unauthenticated attackers to seize control of endpoint management systems.https://cloudsecpulse.com/c/data-breaches/met-police-hit-with-enforcement-notice-after/https://cloudsecpulse.com/c/data-breaches/met-police-hit-with-enforcement-notice-after/Thu, 15 Oct 2026 09:27:02 +0000Data BreachesThe ICO penalized the Metropolitan Police for using an unvetted third-party tool, highlighting risks of unauthorized data processing and weak supplier controls.https://cloudsecpulse.com/c/vulnerabilities/aws-s3-encryption-client-flaw-allows-data/https://cloudsecpulse.com/c/vulnerabilities/aws-s3-encryption-client-flaw-allows-data/Thu, 15 Oct 2026 04:36:50 +0000VulnerabilitiesA vulnerability in the .NET client for Amazon S3 lets attackers alter metadata to decrypt objects, requiring immediate upgrades for affected versions.https://cloudsecpulse.com/c/vulnerabilities/businesses-using-sql-server-2017-2022-face-remote/https://cloudsecpulse.com/c/vulnerabilities/businesses-using-sql-server-2017-2022-face-remote/Thu, 15 Oct 2026 02:51:22 +0000VulnerabilitiesA high-severity flaw in Microsoft SQL Server versions 2017 through 2022 allows authorized users to run code remotely, posing operational risks to businesses relying on these databases.https://cloudsecpulse.com/c/vulnerabilities/redash-flaw-lets-users-read-secrets-and-write/https://cloudsecpulse.com/c/vulnerabilities/redash-flaw-lets-users-read-secrets-and-write/Thu, 15 Oct 2026 01:18:41 +0000VulnerabilitiesA critical vulnerability in Redash versions 26.0.0 through 26.9.0 allows attackers with query access to steal application secrets and write files to the server.https://cloudsecpulse.com/c/vulnerabilities/juniper-junos-os-flaw-exposes-networks-to-remote/https://cloudsecpulse.com/c/vulnerabilities/juniper-junos-os-flaw-exposes-networks-to-remote/Wed, 14 Oct 2026 18:07:34 +0000VulnerabilitiesA critical heap overflow in Juniper’s service-deployment daemon allows unauthenticated attackers to seize full control of network devices.https://cloudsecpulse.com/c/vulnerabilities/juniper-junos-os-evolved-command-injection-risks/https://cloudsecpulse.com/c/vulnerabilities/juniper-junos-os-evolved-command-injection-risks/Wed, 14 Oct 2026 18:01:01 +0000VulnerabilitiesA critical flaw in Junos OS Evolved lets low-privilege TACACS users gain root access, threatening operational security for networks using specific versions.https://cloudsecpulse.com/c/vulnerabilities/net-denial-of-service-flaw-cve-2026-96958-risks/https://cloudsecpulse.com/c/vulnerabilities/net-denial-of-service-flaw-cve-2026-96958-risks/Wed, 14 Oct 2026 14:53:36 +0000VulnerabilitiesA high-severity algorithmic complexity flaw in Microsoft .NET libraries allows remote attackers to disrupt services across Windows, Linux, and macOS platforms.https://cloudsecpulse.com/c/vulnerabilities/critical-net-wpf-flaw-cve-2026-96235-threatens/https://cloudsecpulse.com/c/vulnerabilities/critical-net-wpf-flaw-cve-2026-96235-threatens/Wed, 14 Oct 2026 14:53:36 +0000VulnerabilitiesA high-severity vulnerability in Microsoft’s .NET WPF runtime enables attackers to run code over networks, requiring immediate updates for affected Windows applications.