Tagged “cloud”
10 posts
Storm-0558: When a Stolen Signing Key Forges Any Token
A single stolen token-signing key let attackers mint valid cloud identities and read email in about 25 organizations. Root cause, blast radius, and what to do about your own keys.
Malicious Docker Hub Images Are Hiding in Plain Sight
Typosquatted and trojanized public container images have quietly served cryptominers and backdoors for years — why registry pulls need the same scrutiny as package installs.
DNS Hijacking Doesn't Need a Zero-Day, Just Your Registrar Login
A hijacked registrar or Route 53 account lets an attacker redirect your whole domain silently — how it happens, why TLS makes it worse, and how to detect and recover fast.
The IAM Permissions That Quietly Grant Admin, One Hop at a Time
A handful of ordinary-looking AWS IAM permissions combine into full account takeover — the policy chains attackers look for first, and how to close them.
Delete a Bucket, Steal the Data: Cross-Cloud Namespace Risk
Bucket names are globally unique but ownership is not permanent — new research shows deleting and re-registering one silently hijacks AWS, GCP, and Azure data pipelines.
MLflow SSRF (CVE-2026-64849): a validate-then-fetch bug
An unauthenticated SSRF in MLflow's webhook tester bypasses its own IP allowlist via redirects and DNS rebinding, reaching cloud metadata for live credentials.
SCARLETEEL and the case against trusting Terraform state
A cloud intrusion pivoted through a plaintext AWS key sitting in an exposed terraform.tfstate file — why state was never designed to be a secret store.
The Capital One breach: an SSRF bug into 100M records
A misconfigured WAF and an SSRF bug let an attacker reach the AWS metadata service and steal role credentials — exposing 100M+ Capital One records.
Exposed Kubernetes API Servers Are an RBAC Time Bomb
Attackers are actively hunting internet-facing Kubernetes API servers with anonymous-auth on and default service accounts holding broad RBAC access.
The 198M-voter S3 leak that still explains most breaches
A 2017 misconfigured S3 bucket exposed 198 million voter records, and the same public-bucket misconfiguration still causes new breaches every year.