Latest cybersecurity reporting from selected sources.

DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data

The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account to be exploited

LeakyLooker flaws in Google Looker Studio let attackers run cross-tenant SQL attacks on cloud data

Huntress researchers uncover campaign exploiting vulnerabilities to steal data using Elastic Cloud as a data hub

Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud researchers

A rise in attacks on PHP servers, IoT devices and cloud gateways is linked to botnets exploiting flaws, according to new research published by Qualys

Over 29,000 Microsoft Exchange servers remain unpatched against a vulnerability that could allow attackers to seize control of entire domains in hybrid cloud environments

Wiz believes the active campaign is part of a broader crypto-scam infrastructure, which uses a wide range of exploitation techniques

Patched privilege escalation flaw in Google Cloud Platform linked to wider cloud security concerns

The cryptographic vulnerabilities were found in Sync, pCloud, Icedrive and Seafile by ETH Zurich

A newly discovered flaw in open source utility Fluent Bit could enable widespread DoS, RCE and information leakage

Orca Security said the issue mirrors a previously identified vulnerability in Azure CLI