Cloud & Enterprise
Cloud and enterprise IT covers identity, access, SaaS, hybrid infrastructure and corporate attack surfaces. The analysis helps readers follow risks, incidents and architectural decisions relevant to complex environments.
Ransomware Recovery in 24–48 Hours Remains Out of Reach: 4 Cases Out of 800+
Fenix24's State of Recoverability 2026, based on 500+ ransomware recoveries, shows only 0.5% of clients neared their 24–48 hour restor…
CenterPoint Energy Confirms Data Breach: 7 Million Customers' PII at Risk
CenterPoint Energy filed an SEC Form 8-K on September 14, 2026, confirming a data breach in which an unauthorized actor accessed custo…
LiteSpeed Enterprise: Hosting User Can Gain Root on Shared Servers
cPanel disclosed a critical flaw in LiteSpeed Web Server Enterprise that lets a low-privilege website user escalate to root, bypassing…
Patch Automation: When Speed Becomes a Risk for 10,000 Endpoints
Uncontrolled patch automation can turn a single faulty update into a mass incident across 10,000 endpoints. An update-ring model with…
Unit 42 Maps 40,000 Cloud Identities: From ML Clustering to SQL Heuristics
Unit 42 researchers analyzed over 40,000 AWS identities using UMAP and HDBSCAN, extracting patterns convertible into SQL heuristics to…
Cyber Resilience Act: A Legal Bug in the Line of Fire
From September 11, 2026, Article 14 of the CRA requires manufacturers to notify authorities within 24 hours of any actively exploited…
CISA/FBI Post-Attack Communication Guidance Splits Experts
CISA and the FBI released joint guidance on September 8, 2026, urging service providers to replace PR spin with technical transparency…
GitLab Patches CVE-2026-85706: Path Traversal CVSS 10.0 in Self-Managed Instances
GitLab released critical patches on September 10 for CVE-2026-85706, a path traversal vulnerability with a CVSS 10.0 score that expose…
IDScan Confirms Breach: 153 Million Driver's Licenses for Sale on Dark Web
IDScan.net has confirmed a data breach exposing millions of identity documents. The dark web service Nexus was selling them with trace…
Microsoft: Vishing on Employee Personal Phones to Breach M365
Storm-3032 and Storm-3121 are calling employees on their personal cell phones to steal Microsoft 365 credentials. The lack of logs on…
VirtualBox VirtioSCSI Memory Bug Opens Guest to Hypervisor
CVE-2026-71132: A memory initialization flaw in VirtualBox's VirtioSCSI device enables information disclosure with scope change. Oracl…
TrendAI Apex One: TmccCore Flaw Allows Local Root Escalation
CVE-2025-71414 in the TmccCore component of Apex One enables local privilege escalation to root. A patch was released in February 2026…