Cloud | Sec | Labs

https://ift.tt/o4SY8Ni servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running.

https://ift.tt/qJgt6Si weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of

https://ift.tt/1EWxLqj newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens,