Study confirms 103 of 233 AI-discovered cloud threats on live clouds
Three foundation models reached 75.2% precision, but multi-model agreement did not improve confirmation rates.
13 stories, newest first · one card per story
Three foundation models reached 75.2% precision, but multi-model agreement did not improve confirmation rates.

Attackers phished MFA codes, linked foreign projects to victim billing, and kept Gemini prompts hidden from the organization.

Attackers used leaked plaintext internal credentials to read the production database and access shared clusters in nine regions.
Researcher discloses an unpatched credential leak in Kubernetes cloud-provider-gcp after Google's deadline passed.
Ubuntu patched GCP Linux kernel vulnerabilities that could allow an attacker to compromise the system.
Ubuntu issued USN-8905-1 fixing multiple Linux kernel vulnerabilities on Google Cloud images.
Ubuntu's USN-8878-1 patches GCP Linux kernels for an i.MX crash and an Arm TLB privilege flaw.
Mailing-list reply asks how large a host must be to join cloud predisclosure.

A 2026 buyer's guide ranks 11 GCP security tools, leading with Security Command Center and Wiz.
SentinelOne extended Wayfinder threat hunting to AWS, Azure, and Google Cloud control planes.

A design flaw in Google's Kubernetes Config Connector allows attackers with namespace access to take over an entire GCP organization using a single YAML file.

An editorial scorecard ranks the top ten Google Cloud security tools for 2026, with Wiz, Sysdig, and Security Command Center leading on correlation, GKE runtime, and native depth.

Unit 42 maps attack paths into AWS, Azure, and GCP VMs through intended features like startup scripts and SSH key pushes.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views