serisec

Category: Cloud

  • NVIDIA confirms GeForce NOW data breach affecting Armenian users

    NVIDIA confirms GeForce NOW data breach affecting Armenian users NVIDIA has confirmed in a statement for BleepingComputer that GeForce NOW user information has been exposed in a data breach. […] Bill Toulas Go to bleepingcomputer

  • New PCPJack worm steals credentials, cleans TeamPCP infections

    New PCPJack worm steals credentials, cleans TeamPCP infections A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP’s access to the systems. […] Bill Toulas Go to bleepingcomputer

  • TeamPCP deploys Iran-targeted wiper in Kubernetes attacks

    TeamPCP deploys Iran-targeted wiper in Kubernetes attacks The TeamPCP hacking group is targeting Kubernetes clusters with a malicious script that wipes all machines when it detects systems configured for Iran. […] Bill Toulas Go to bleepingcomputer

  • Google: Cloud attacks exploit flaws more than weak credentials

    Google: Cloud attacks exploit flaws more than weak credentials Hackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just days. […] Bill Toulas Go to bleepingcomputer

  • Smashing Security podcast #456: How to lose friends and DDoS people

    Smashing Security podcast #456: How to lose friends and DDoS people When the mysterious operator of an internet archiving-service decided to silence a curious Finnish blogger, they didn’t just send a stroppy email – they allegedly weaponised their own CAPTCHA page to launch a DDoS attack, threatened to invent an entirely new genre of AI…

  • Cloudflare Down – 6 Hour of Massive Global Service Outage Cause Customers Unreachable From the Internet

    Cloudflare Down – 6 Hour of Massive Global Service Outage Cause Customers Unreachable From the Internet Cloudflare experienced a significant six-hour global service outage on February 20, 2026, causing major disruptions for customers utilizing its Bring Your Own IP (BYOIP) services. The incident, which began at 17:48 UTC and lasted for six hours and seven…

  • Cloud file-sharing sites targeted for corporate data theft attacks

    Cloud file-sharing sites targeted for corporate data theft attacks A threat actor known as Zestix has been offering to corporate data stolen from dozens of companies likely after breaching their ShareFile, Nextcloud, and OwnCloud instances. […] Bill Toulas Go to bleepingcomputer

  • Docker Hardened Images now open source and available for free

    Docker Hardened Images now open source and available for free More than a 1,000 Docker Hardened Images (DHI) are now freely available and open source for software builders, under the Apache 2.0 license. […] Bill Toulas Go to bleepingcomputer

  • Zeroday Cloud hacking event awards $320,0000 for 11 zero days

    Zeroday Cloud hacking event awards $320,0000 for 11 zero days The Zeroday Cloud hacking competition in London has awarded researchers $320,000 for demonstrating critical remote code execution vulnerabilities in components used in cloud infrastructure. […] Bill Toulas Go to bleepingcomputer

  • Amazon: Ongoing cryptomining campaign uses hacked AWS accounts

    Amazon: Ongoing cryptomining campaign uses hacked AWS accounts Amazon’s AWS GuardDuty security team is warning of an ongoing crypto-mining campaign that targets its Elastic Compute Cloud (EC2) and Elastic Container Service (ECS) using compromised credentials for Identity and Access Management (IAM). […] Bill Toulas Go to bleepingcomputer

  • Amazon disrupts Russian GRU hackers attacking edge network devices

    Amazon disrupts Russian GRU hackers attacking edge network devices The Amazon Threat Intelligence team has disrupted active operations attributed to hackers working for the Russian foreign military intelligence agency, the GRU, who targeted customers’ cloud infrastructure. […] Bill Toulas Go to bleepingcomputer

  • CISA Warns of Windows Cloud Files Mini Filter 0-Day Vulnerability Exploited in Attacks

    CISA Warns of Windows Cloud Files Mini Filter 0-Day Vulnerability Exploited in Attacks A critical alert regarding an active zero-day vulnerability affecting the Microsoft Windows Cloud Files Mini Filter Driver. The vulnerability poses a significant risk to organizations running affected Windows systems and requires immediate remediation efforts. CISA reports that the vulnerability, tracked as CVE-2025-62221,…

  • Zeroday Cloud hacking contest offers $4.5 million in bounties

    Zeroday Cloud hacking contest offers $4.5 million in bounties A new hacking competition called Zeroday Cloud, focused on open-source cloud and AI tools, announced a total prize pool of $4.5 million in bug bounties for researchers that submit exploits for various targets. […] Bill Toulas Go to bleepingcomputer

  • Hackers hide behind Tor in exposed Docker API breaches

    Hackers hide behind Tor in exposed Docker API breaches A threat actor targeting exposed Docker APIs has updated its malicious tooling with more dangerous functionality that could lay the foundation for a complex botnet. […] Bill Toulas Go to bleepingcomputer

  • 10 Best Cloud Penetration Testing Companies in 2025

    10 Best Cloud Penetration Testing Companies in 2025 As more businesses migrate their infrastructure to the cloud, cloud penetration testing has become a critical service. Unlike traditional network tests, cloud pentesting focuses on unique attack vectors such as misconfigured services, insecure APIs, and overly permissive IAM (Identity and Access Management) policies. In 2025, the best…

  • Smashing Security podcast #431: How to mine millions without paying the bill

    Smashing Security podcast #431: How to mine millions without paying the bill In episode 431 of the “Smashing Security” podcast, a self-proclaimed crypto-influencer calling himself CP3O thought he had found a shortcut to riches — by racking up millions in unpaid cloud bills. Meanwhile, we look at the growing threat of EDR-killer tools that can…

  • 10 Best Cloud Monitoring Tools in 2025

    10 Best Cloud Monitoring Tools in 2025 Cloud monitoring tools are essential for maintaining cloud-based services and applications’ performance, availability, and security. These tools provide real-time visibility into cloud infrastructure, enabling monitoring metrics such as resource utilization, application performance, and network traffic. Cloud monitoring tools help identify and resolve issues quickly by offering customizable dashboards…

  • 10 Best Cloud VPN Providers – 2025

    10 Best Cloud VPN Providers – 2025 Cloud VPNs have become essential for both businesses and individuals seeking secure, private, and reliable internet access in 2025. As cyber threats evolve and remote work becomes the norm, choosing the right cloud VPN provider is crucial for safeguarding sensitive data and ensuring seamless connectivity across the globe.…

  • Microsoft Announces New Security Defaults for Windows 365 Cloud PCs

    Microsoft Announces New Security Defaults for Windows 365 Cloud PCs Summary 1. Redirection controls disable clipboard, drive, USB, and printer access by default to prevent data exfiltration and malware injection. 2. Virtualization-based security enables VBS, Credential Guard, and HVCI on Windows 11 Cloud PCs to fortify against credential theft and kernel exploits. 3. Selective implementation…

  • Microsoft finds default Kubernetes Helm charts can expose data

    Microsoft finds default Kubernetes Helm charts can expose data Microsoft warns about the security risks posed by default configurations in Kubernetes deployments, particularly those using out-of-the-box Helm charts, which could publicly expose sensitive data. […] Bill Toulas Go to bleepingcomputer

  • WhatsApp unveils ‘Private Processing’ for cloud-based AI features

    WhatsApp unveils ‘Private Processing’ for cloud-based AI features WhatsApp has announced the introduction of ‘Private Processing,’ a new technology that enables users to utilize advanced AI features by offloading tasks to privacy-preserving cloud servers. […] Bill Toulas Go to bleepingcomputer

  • ASUS warns of critical auth bypass flaw in routers using AiCloud

    ASUS warns of critical auth bypass flaw in routers using AiCloud ASUS is warning about an authentication bypass vulnerability in routers with AiCloud enabled that could allow remote attackers to perform unauthorized execution of functions on the device. […] Bill Toulas Go to bleepingcomputer

  • Cloudflare R2 service outage caused by password rotation error

    Cloudflare R2 service outage caused by password rotation error Cloudflare has announced that its R2 object storage and dependent services experienced an outage lasting 1 hour and 7 minutes, causing 100% write and 35% read failures globally. […] Bill Toulas Go to bleepingcomputer

  • New Campaign Attacking PyPI Users to Steal Sensitive Data Including Cloud Tokens

    New Campaign Attacking PyPI Users to Steal Sensitive Data Including Cloud Tokens Security researchers have uncovered a sophisticated malware campaign targeting users of the Python Package Index (PyPI), Python’s official third-party software repository.  This latest attack vector involves several malicious packages disguised as time-related utilities, which are actually designed to steal sensitive information including cloud…

  • Silk Typhoon hackers now target IT supply chains to breach networks

    Silk Typhoon hackers now target IT supply chains to breach networks Microsoft warns that Chinese cyber-espionage threat group ‘Silk Typhoon’ has shifted its tactics, now targeting remote management tools and cloud services in supply chain attacks that give them access to downstream customers. […] Bill Toulas Go to bleepingcomputer

  • Google Cloud introduces quantum-safe digital signatures in KMS

    Google Cloud introduces quantum-safe digital signatures in KMS Google Cloud has introduced quantum-safe digital signatures to its Cloud Key Management Service (Cloud KMS), making them available in preview. […] Bill Toulas Go to bleepingcomputer

  • whoAMI attacks give hackers code execution on Amazon EC2 instances

    whoAMI attacks give hackers code execution on Amazon EC2 instances Security researchers discovered a name confusion attack that allows access to an Amazon Web Services account to anyone that publishes an Amazon Machine Image (AMI) with a specific name. […] Bill Toulas Go to bleepingcomputer

  • Hackers exploit critical Aviatrix Controller RCE flaw in attacks

    Hackers exploit critical Aviatrix Controller RCE flaw in attacks Threat actors are exploiting a critical remote command execution vulnerability, tracked as CVE-2024-50603, in Aviatrix Controller instances to install backdoors and crypto miners. […] Bill Toulas Go to bleepingcomputer