Tag archive

Cloud Security

Cloud control plane abuse, Kubernetes exposure, SaaS defaults, and vendor risk.

Conceptual illustration of a Jenkins-style CI/CD controller at the center of a software factory, with pipeline lines to code, cloud, and artifacts and a cracked supply-chain link on one plugin package

Jenkins Plugin Security: Hardening the CI/CD Supply Chain Before Attackers Do

*A conceptual view of Jenkins as the high-privilege control plane of the software factory—and of plugins as the supply-chain links that can break it.*

Illustration of the DarkSword pure-JavaScript Safari watering-hole full chain on iOS 18, from compromised site to kernel and hit-and-run exfil

Cloud Security Research

DarkSword: Pure-JavaScript iOS 18 Watering-Hole Full Chain Used by Multiple Actors

On-premises SharePoint Server farm under active incident response for a zero-day privilege-escalation exploit

Cloud Security Research

Microsoft SharePoint Zero-Day CVE-2026-56164 Under Active Attack: On-Prem Farms Face Unauthenticated Privilege Escalation

Illustration of enterprise DHCP server infrastructure under elevated risk during Microsoft July 2026 Patch Tuesday

Cloud Security Research

Microsoft July 2026 Patch Tuesday Hits Record 622 CVEs With Critical DHCP Server RCEs

Illustration of an on-premises Dynamics NAV and Business Central ERP server under unauthenticated remote code execution risk via a crafted login path

Cloud Security Research

CVE-2026-55944: Critical Unauthenticated RCE Hits Microsoft Dynamics NAV and Business Central On Premises

Illustration of chained SonicWall SMA1000 zero-days CVE-2026-15409 SSRF and CVE-2026-15410 code injection from internet exposure to full appliance compromise.

Cloud Security Research

SonicWall SMA1000 Zero-Days CVE-2026-15409 and CVE-2026-15410 Actively Exploited; Patch Alone Is Not Enough

Technician performing urgent integrity checks and remediation on an internet-facing Ivanti Connect Secure remote-access gateway after CISA KEV listing of CVE-2025-22457

Cloud Security Research

CISA Adds Actively Exploited Ivanti Connect Secure Flaw CVE-2025-22457 to KEV Catalog

Related desks

Research

Latest

Jul 15, 2026, 7:26 PM EDT · Research · Cloud Security6 minFinnish Police Issue Wanted Notice for Aleksanteri Kivimäki After Supreme Court Finalises Vastaamo Sentence

Finnish Police Issue Wanted Notice for Aleksanteri Kivimäki After Supreme Court Finalises Vastaamo Sentence

Jul 15, 2026, 7:24 PM EDT · Research · Cloud Security6 minBlueHammer Zero-Day Microsoft Defender Flaw Escalates to Ransomware Priority After CISA KEV Listing

BlueHammer Zero-Day Microsoft Defender Flaw Escalates to Ransomware Priority After CISA KEV Listing

Jul 15, 2026, 7:03 PM EDT · Research · Cloud Security7 minCompromised Credentials Overtake Vulnerabilities as Primary Ransomware Entry Point

Compromised Credentials Overtake Vulnerabilities as Primary Ransomware Entry Point

Jul 15, 2026, 6:51 PM EDT · Research · Cloud Security7 minKudankulam Nuclear Data Leak Exposes Third-Party Vulnerability in India’s Critical Energy Supply Chain

Kudankulam Nuclear Data Leak Exposes Third-Party Vulnerability in India’s Critical Energy Supply Chain