Topic
The practice and product market for protecting workloads, identities, data and configurations running in public cloud environments.
ReliaQuest reports ransomware actors are exploiting CVE-2026-0257, an authentication bypass in Palo Alto PAN-OS GlobalProtect and Prisma Access. The Bedrock Agents credential flaw Zenity found is already fixed.
Reality
Orca Security cut query cost 90%, input tokens 93% and latency 75% in Discovery AI, its natural-language agent for Sonar queries on Amazon Bedrock. The baseline was a one-prompt proof of concept, so the savings transfer only to teams that start from one.
Reality
Tamnoon's Cloud Remediation Index counts 53% of 14.86 million cloud detections as still open, against 41% a year earlier. Tamnoon sells remediation and is the only source for the figures, so the trend is a vendor's finding.
Reality
Truffle Security retested 10,616 publicly leaked AWS credentials and 88 percent still authenticated. The median key was about five years old and had no successor.
Perspective Coverage
4 publishersReality
Hybrid ML-KEM is live on google.com and googleapis.com, and Cloud KMS post-quantum algorithms are generally available. The rest of the roadmap is a dated dependency schedule.
Reality
Unit 42 traced AWSCompromisedKeyQuarantine through three versions since August 2020 and documented the GitHub secret scanning integration that lets AWS attach the policy to an exposed IAM user automatically, with the owner notified afterwards.
Reality
NIST and CISA have finalised implementation guidance for the identity tokens behind single sign-on, written for federal agencies and their cloud providers. The case the announcement rests on is one cited attack.
Reality
Varonis Threat Labs registered its own External Authentication Method in a test Entra tenant and served a copy of Microsoft's password prompt during the second factor. Every sign-in completed, and the passwords landed in a file.
Reality
Confidential computing never promised memory freshness. DDRop turns that omission into arbitrary access inside a TDX guest, using a board that costs under $200 and two prerequisites a cloud provider already holds.
Reality
Trust Boundary's walkthrough of the 2019 Capital One breach puts the weight on the IAM role attached to the firewall instance, and says the OCC consent order that followed does not mention server-side request forgery at all.
Reality
Yvan Saf deployed the same serverless Todo API twice on one AWS account, once bare and once hardened, then attacked both from his own terminal. The bare list route reads the whole DynamoDB table because nothing in the request path knows who is calling.
Reality
Google's threat group describes scanning, exploitation, error correction and IP rotation running with no operator in the loop, and the evidence status it attaches to the class of activity is attempt observed, success unconfirmed.
Reality
The new cloud web applications threat matrix sorts eleven ATT&CK tactics for managed runtimes and serverless code, starting with assets an app team rarely owns, such as dead DNS records and linked source repositories.
Reality
Mandiant traced the Q2 2026 campaign to an AI coding chatbot, one prompt and a set of agent instructions that ran the scanning pipeline, fixed its own errors and rotated IPs with nobody at the keyboard.
Perspective Coverage
3 publishersReality
A human broke in and assembled the framework, and after that the scanning, the retries and the address rotation ran on their own out of the victim's own IPs. That middle stretch is what response clocks have to survive.
Reality
The 500-plus engagements behind that share are all companies that already needed an outside responder, so the figure describes how fast a bad day closes rather than your odds of having one. It still decides which of your controls can fire in time.
Reality
Upwind's Series C more than doubles the company's price since January and funds runtime collection pulled out of the Linux kernel, but it records what five investors will underwrite rather than what cloud security buyers have already bought.
Reality