Leaked Screenshots Reignite Questions Over Who Can Access U.S. Government Data in Microsoft’s Cloud
Screenshots shared by an anonymous whistleblower appear to show a Microsoft engineer based outside the United States being approved to view logs from a U.S. government cloud environment...
Railway Incident May Have Exposed Customer API Keys and Database Secrets
Railway says an unauthorized party may have accessed customer environment variables, including some decrypted secrets. Customers are being urged to rotate credentials immediately while the cloud platform investigates...
PwnEscape: Linux Kernel Bug Lets Rogue VMs Reach Into the Host
A Linux kernel flaw dubbed PwnEscape (CVE-2026-99999) lets an attacker-controlled virtual machine leak host memory through a checksum-handling bug in the networking stack, with researchers demonstrating a path...
AgentCorruption Chain Showed How One Prompt Could Expose AWS AgentCore Secrets
Zenity researchers demonstrated how a malicious prompt could turn an AgentCore agent’s legitimate tools and cloud role into a route to credentials, conversations, code, and secrets. AWS has...
Unsigned JWT Flaw Opened Microsoft Analytics Service to Administrator Access
A missing signature check in Microsoft’s internal Titan analytics service allowed a forged token to obtain administrator privileges and query connected databases. Microsoft closed the public endpoint after...
Cloudflare Patches Container Flaw That Exposed Residual Cross-Tenant Data
Cloudflare fixed a storage-layer weakness that could reveal fragments left behind by other customers using its Containers platform. The company found no malicious exploitation in retained telemetry and...
AWS Integration Lambda Could Turn Limited IAM Access Into Privileged Cloud Actions
CVE-2026-94384 allowed callers of an Amazon Connect Salesforce setup function to make AWS requests with the Lambda execution role's privileges. AWS has fixed the issue in AmazonConnectSalesforceLambda 5.26...
Microsoft Fixes CVSS 10 Azure AI Foundry Privilege-Escalation Flaw
Microsoft has remediated a maximum-severity authentication flaw in Azure AI Foundry that could allow an unauthenticated network attacker to gain elevated privileges. The cloud-side fix is complete, but...