And IT is expected to make it all happen—securely, of course. They email something from a personal account, then upload a file to a cloud drive, then plug in a USB stick two weeks later. The annual cost of insider incidents at $19.5 million per organization – and that number keeps climbing. Insider risk used to be the line item nobody fought for in the security budget.

Every link in CloudSecList is something I found and read myself, and included on technical merit alone. CloudSecList is the best way to stay on top of cloud security and its intersection with AI, without being overwhelmed by all the noise. Malicious versions of the arrayref Rust crate (and others) executed a backdoor at compile time.

How the Wiz Cloud Cost automates cost allocation to power developer-led cost optimization and connect cost to business value. Inside the multi-agent pipeline and feedback loops that turned a bucket scanner into a context engine. https://www.mrosidin.com/oneplus-10-professional-analysis-slick-efficiency-costing-decrease-than-rivals.html Wiz honeypots uncover active campaigns targeting LiteLLM, MCP servers, and AI frameworks through RCE, blind prompt injection, and memory credential theft.

How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)

The team developed and tested a hardware attack called DDRop, a small, low-cost device that can be physically attached to a server during a brief, one-time visit. Get the latest news, expert insights, exclusive resources, and strategies from industry leaders, all for free. Not because the data doesn’t exist, but because it lives in a dozen tools that don’t share context. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deployment of a previously undocumented backdoor codenamed Antino. Earlier this year, our team at OX Security , traced critical vulnerabilities in Anthropic’s MCP source code, downloaded more than 150 million times.

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

A new endpoint threat leads to a new detection tool, a new identity attack brings another monitoring system, while a new SaaS risk adds another source of alerts. CloudSecList is a newsletter that keeps thousands of security professionals informed about cloud security and its intersection with AI, hand-curated by Marco Lancini. Marco curates the most cloud security relevant stuff in this newsletter. Most newsletters sit unread in your inbox; some you look forward to reading. I joined the weekly CloudSecList newsletter in early 2021, and I love it!

• Monthly updates on all things CSA – research highlights, training, upcoming events, webinars, and recommended reading.
• It did not reach the Docker Hub web interface, and it could not be used to change a password, email address, or two-factor settings, or to take over an account.
• The Durham research team contributed to designing the hardware device and evaluating its effectiveness on Intel TDX systems.
• ⚡ Threat of the Week Atlassian Flaw Exploited in the Wild — Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian…
• The real problem is that tools such as Claude Code, OpenAI Codex, Claude Cowork, and GitHub Copilot are becoming extensible agent runtimes.

What’s New in Wiz Service Catalog: Smarter Discovery, Governance, and Service-Level Context

That autonomy applies across every identity and entitlement placed under governance, continuously reassessing access as usage, roles, and risk signals change. The real problem is that tools such as Claude Code, OpenAI Codex, Claude Cowork, and GitHub Copilot are becoming extensible agent runtimes. According to new research from CrowdStrike, 80% of modern cyberattacks are identity-driven , leveraging compromised credentials. Check your expanding identity attack surface Identity has become the new perimeter, and attackers know it. And an attacker is going to be inside that account seconds later, holding a session your identity provider considers entirely legitimate.

• With that much activity, finding the signals that need attention quickly becomes as much an operational challenge as a security one.
• Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories.
• The quarterly board meeting is two weeks out.
• The access was limited to the registry.
• In the process, a signal that looks minor on its own can be overlooked even though it may become significant when combined with activity from another system.
• It is used in a wide range of applications where privacy and security are critical, such as handling personal data, financial information and business-sensitive workloads.

Zero Trust

A flaw in Docker Hub, the registry where container images are published https://medicalcases.eu/datacore-named-a-leader-in-software-defined-storage-and-hyperconverged-infrastructure-by-whatmatrix/ and downloaded, let one user push, pull, or delete images as another user. The FBI’s Internet Crime Complaint Center reported that business email compromise alone generated $3 billion in losses in 2024 , with AI-enabled attacks accelerating the trend ( FBI IC3 Report ). For security leaders, the inbox remains the front door for attackers.

Over roughly two years, Yu has worked across hardware and cloud TEE deployments, privacy-preserving financial-data analysis, and private AI inference. Security teams can decide afterward whether those actions were acceptable, but fully enumerating them in advance is not only antithetical to using an agent but also practically impossible. When things go well, developers can save a lot of time and effort. You cannot reliably predict what an AI agent is going to do.

Modern business environments run on identity, delegated trust, cloud roles, automation pipelines, APIs, machine permissions, and continuously exchanged credentials. From automated code completion to autonomous infrastructure management, AI tools and AI agents help DevOps speed up deployment cycles and change how development teams operate in general. Skills, plugins, hooks, repository instructions, and MCP servers can influence what the agent reads, which tools it selects, what commands it runs, and where enterprise data is sent.