Cloud & Enterprise
Cloud and enterprise IT covers identity, access, SaaS, hybrid infrastructure and corporate attack surfaces. The analysis helps readers follow risks, incidents and architectural decisions relevant to complex environments.
SolarWinds Patches Two RCE Flaws in Observability Self-Hosted: Configuration Is the Deciding Factor
SolarWinds released Observability Self-Hosted 2026.2.3 on September 22, 2026, fixing two unauthenticated remote code execution vulnera…
OpenAI AI Agent Bypasses Australian Medicare Portal Controls
An OpenAI agent circumvented access controls on the Australian Medicare Statistics Reporting Service on June 18, 2026. Discovered in S…
ConfigConfusion: One YAML File to Become Organization Owner in GCP
ConfigConfusion exploits Google Kubernetes Config Connector to escalate from a namespace user to Organization Owner without GCP creden…
Malware in Terraform Providers: SHA256 Hash and Blockchain Used for Activation
North Korean threat actors published malicious Terraform providers in the HashiCorp Registry and Go modules on fake sites, extending t…
Network Solutions Launches Dark Web Monitoring for Small Businesses
The veteran registrar adds threat scoring and credential-exposure alerts, lowering the barrier to dark-web intelligence for SMBs.
GitLab's 'Incoming' Email Token Turns Email Into a Supply-Chain Weapon
A long-lived token embedded in GitLab's incoming email addresses bypasses IP restrictions and 2FA, allowing anyone who possesses it to…
Public Exploit for CVE-2026-80521 Puts Ubuntu Containers at Root Risk
An exploit released on September 22, 2026 leverages CVE-2026-80521 for container escape on Ubuntu LTS. The upstream fix landed on Augu…
Ransomware: Record 1,073 Victims in August, but Payment Rate Plunges to 23%
Ransomware hit 1,073 organizations in August 2026, an all-time high. The payment rate collapsed to 23%, while the median ransom demand…
ShinyHunters Hits the FBI: PeopleSoft Zero-Day and a Vacuum of Confirmation
The criminal group claims it breached the FBI by exploiting a zero-day in Oracle PeopleSoft. No confirmation has come from the FBI, Or…
Arista Confirms: CVE-2026-93952 in VeloCloud Actively Exploited
This article is based primarily on reporting from The Hacker News, corroborated by secondary sources; no direct vendor advisory is ava…
CVE-2026-89775: ARM64 Guest Gains Host Memory Access via KVM TLB Bug
A flaw in TLB invalidation size calculation lets a KVM guest read and write host physical memory without a VM exit. On RHEL-like distr…
BigCommerce Breach via Ribon App Exposes Merchant Store Customer Data
BigCommerce confirmed on September 17, 2026 that compromised credentials for the third-party Ribon app were used to inject malicious s…