Orca adds discovery for shadow AI apps and agents
Agentless scanning looks for builder fingerprints and maps agent permissions, credentials and access to sensitive cloud data.
Stories per day · 30 days
12 RSS
Relatedai-agents3aws3datadog3funding3upwind3ciso2cnapp2cspm2hiring2series-c2siem2soc2ai-agent1ai-security1alert-triage1azure1bug-bounty1checkov1
123 stories, newest first · one card per story
Stories tagged #cloud-security
Datadog says high and critical cloud flaws quadrupled since May
Among monitored workloads, the median count rose from four in May to 16 in November, Datadog claims.
1
Cybersecurity job listings published for November 10, 2026
Openings include two CISO posts plus application, cloud, detection, and compliance roles in several countries.
Paper proposes agentic attribution of cloud resource ownership
On 100 AWS resources the architecture reached 92.1% weighted recall and 86.6% weighted precision, versus 54.8% and 77.4%.
Study confirms 103 of 233 AI-discovered cloud threats on live clouds
Three foundation models reached 75.2% precision, but multi-model agreement did not improve confirmation rates.
LLMJacking Emerges as Thriving Cybercriminal Enterprise
Cybercriminals resell stolen cloud access to commercial LLMs, with victims charged up to $1 million in resources before access is revoked.
1
Google Offers $250,000 Root-in-Cloud Bug Bounty for Cloud Takeover
Google offers $250,000 for researchers to demonstrate complete administrative takeover of arbitrary projects or organizations without prior access.
1
Wiz Red and Blue Agents enable proactive SOC security
Wiz's Red Agent finds exploitable risks pre-breach and Blue Agent investigates threats at AI speed.
Upwind raises $400 million Series C, declines Datadog offer
Nine months after a $250 million round, the startup is valued at $3.8 billion with about $90 million forecast ARR.
Upwind Security raises $400 million Series C at $3.8 billion valuation
The round comes nine months after a $250 million raise and follows disputed reports that Datadog offered nearly $4 billion to acquire the startup.
Upwind raises $400 million Series C for cloud and AI security
Bessemer led the round less than nine months after a $250 million Series B, lifting total funding above $800 million.
Wazuh adds AI Analyst reports and LLM integrations for SOC workflows
Wazuh Cloud's AI Analyst uses Amazon Bedrock and Claude to email scheduled posture reports, while self-hosted Llama 3 or Claude 3.5 Haiku options support threat hunting.
Cyber insurers expand beyond underwriting as AI and cloud risks grow
Carriers such as Cowbell say historical ransomware claims data cannot keep pace with AI-aided phishing and stolen cloud keys.
1
SANS survey finds cloud security maturity lagging widespread adoption
Of 400 professionals surveyed, 93% run production cloud workloads, but only 40% call their strategy advanced.
1
Microsoft security chief says sovereignty is a speed and risk choice
Halbheer says boards buy a location and assurance, while identity abuse and detection speed decide real control.
1
Marvell, Microsoft and Oracle start OCP group for server HSMs
They want a FIPS 140-3 Level 3 module so cryptographic keys stay inside the server.
1
CSA survey: DLP often detects data loss only after it leaves
Among groups that lost data, 16% said DLP blocked the worst case first; 73% reported a confirmed incident in 24 months.
Cybersecurity job openings listed for October 20, 2026
The roundup spans architect, CISO, cloud, analyst, and penetration-testing roles across several countries.
Sweet Security ships one-click virtual patching for cloud workloads
A catalog policy blocks exploit attempts on running nodes until engineering deploys a permanent fix.
1
11 Best Infrastructure as Code (IaC) Security Tools Compared (2026): Features & Pricing
A 2026 buyer's comparison ranks 11 IaC security scanners, platforms, and Terraform governance tools.
Most high-severity cloud security findings are downgraded once an AI agent checks the environment
Sola Security's AI agent changed grades on 75.1% of 9,967 high-severity cloud findings, mostly downward.
7
Top 10 Best IaC Security Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Wiz, Snyk IaC, and Checkov atop ten infrastructure-as-code security tools.
How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)
Wiz says Red Agent found a public sensitive-data page at an unnamed Fortune 500 financial firm.
12 Best Secrets Management Tools Compared (2026): Features & Pricing
A 2026 roundup compares 12 secrets-management tools, ranking HashiCorp Vault, cloud vaults, Akeyless, and ephemeral-access brokers.
4