Insights for the modern cloud
In-depth guides, tutorials, and best practices for AWS, Azure, GCP, and OCI.
Why Kubernetes Network Policies Alone Can't Fix Insecure Protocols
ADB and WebRTC expose unencrypted traffic in multi-tenant clusters. Network policies block reachability but don't encrypt payloads or add authentication. You need protocol-aware controls.
Amazon WorkSpaces for AI Agents Adds Linux and Windows 11 Desktops
WorkSpaces for AI agents now runs on Linux and Windows 11 alongside Windows Server, letting agents operate in the same OS environments as developers and end users without re-platforming workloads.
Why Kubernetes Network Policies Alone Can't Fix Insecure Protocols
ADB and WebRTC expose unencrypted traffic in multi-tenant clusters. Network policies block reachability but don't encrypt payloads or add authentication. You need protocol-aware controls.
ElastiCache Serverless Public Endpoints Expand to AWS GovCloud (US)
Amazon ElastiCache Serverless for Valkey now supports public endpoints in AWS GovCloud (US) Regions, enabling VPC-free cache access for government workloads.
Microsoft Finds Exploited Vulnerabilities Cluster in Small High-Impact CVE Subset
Microsoft analysis shows real-world exploitation concentrates in a tiny fraction of CVEs. Defenders should prioritize based on exploitation likelihood, exposure, and blast radius rather than chasing every vulnerability.
Patch Node.js 22, 24, 26 in Azure DevOps pipelines after October 2026 security release
Node.js 22.23.4, 24.22.1, and 26.12.1 fix DNS, TLS, and Brotli flaws. Update build agents and runtime tasks now.
Microsoft Details Help Desk Impersonation Leading to AD CS Abuse via ESC1 and ESC8
Attackers used Teams impersonation to gain remote access, then abused Active Directory Certificate Services misconfigurations to escalate privileges and persist.
Google Cloud Security Summit: Agentic-Era Defenses from CodeMender to Auth Manager
Google Cloud unveiled machine-speed security tools at its Security Summit, including CodeMenter for autonomous vulnerability remediation, Auth Manager for agent identity, and expanded VPC Service Controls for identity-based perimeters.
LLMJacking Surges as Threat Actors Monetize Stolen Cloud Model Access
Google Threat Intelligence Group details how financially motivated clusters hijack enterprise LLM APIs, generating six-figure daily bills and reselling access through underground LLM Mixers.
Compute Engine API Multi-Versioning Goes GA with Date-Based Stable Releases
Google Cloud launches interface-based versioning for Compute Engine, adding immutable quarterly stable versions and preview releases while keeping /v1 unchanged.