Latest cybersecurity reporting from selected sources.

Not every cloud breach starts with malware or a zero-day. In this incident, attackers discovered an exposed Spring Boot Actuator endpoint, harvested credentials from leaked configuration data, then used the OAuth2 Resource Owner Password Credentials (ROPC) flow to authenticate without MFA.

Threat actors are exploiting misconfigured web applications used for security training and internal penetration testing, such as DVWA, OWASP Juice Shop, Hackazon, and bWAPP, to gain access to cloud environments of Fortune 500 companies and security vendors. [...]

EMERALDWHALE breach allowed access to over 10,000 repositories and resulted in the theft of more than 15,000 cloud service credentials

A Thales report found that 44% of organizations have experienced a cloud data breach, with human error and misconfigurations the leading root causes

Cloud computing and analytics company Snowflake said a "limited number" of its customers have been singled out as part of a targeted campaign

The newly found misconfigured cloud services are discovered just two weeks after an initial data breach affecting millions came to light.