Insights for the modern cloud
In-depth guides, tutorials, and best practices for AWS, Azure, GCP, and OCI.
Storm-3358 Deploys ARTEX AI Framework Against Financial Sector
Microsoft Threat Intelligence observed financially motivated actor Storm-3358 using the agentic AI offensive framework ARTEX to target financial organizations in October 2026.
Self-Service Regional Failover with ARC Region Switch Behind Centralized Ingress
Application teams can now trigger regional failover independently using ARC Region Switch while security teams retain control of ingress proxies via Transit Gateway, Route 53 Private Hosted Zones, and VPC Lattice.
Why Kubernetes Network Policies Alone Can't Fix Insecure Protocols
ADB and WebRTC expose unencrypted traffic in multi-tenant clusters. Network policies block reachability but don't encrypt payloads or add authentication. You need protocol-aware controls.
Amazon WorkSpaces for AI Agents Adds Linux and Windows 11 Desktops
WorkSpaces for AI agents now runs on Linux and Windows 11 alongside Windows Server, letting agents operate in the same OS environments as developers and end users without re-platforming workloads.
Storm-3358 Deploys ARTEX AI Framework Against Financial Sector
Microsoft Threat Intelligence observed financially motivated actor Storm-3358 using the agentic AI offensive framework ARTEX to target financial organizations in October 2026.
Microsoft Finds Exploited Vulnerabilities Cluster in Small High-Impact CVE Subset
Microsoft analysis shows real-world exploitation concentrates in a tiny fraction of CVEs. Defenders should prioritize based on exploitation likelihood, exposure, and blast radius rather than chasing every vulnerability.
Patch Node.js 22, 24, 26 in Azure DevOps pipelines after October 2026 security release
Node.js 22.23.4, 24.22.1, and 26.12.1 fix DNS, TLS, and Brotli flaws. Update build agents and runtime tasks now.
Google Cloud Security Summit: Agentic-Era Defenses from CodeMender to Auth Manager
Google Cloud unveiled machine-speed security tools at its Security Summit, including CodeMenter for autonomous vulnerability remediation, Auth Manager for agent identity, and expanded VPC Service Controls for identity-based perimeters.
LLMJacking Surges as Threat Actors Monetize Stolen Cloud Model Access
Google Threat Intelligence Group details how financially motivated clusters hijack enterprise LLM APIs, generating six-figure daily bills and reselling access through underground LLM Mixers.
Compute Engine API Multi-Versioning Goes GA with Date-Based Stable Releases
Google Cloud launches interface-based versioning for Compute Engine, adding immutable quarterly stable versions and preview releases while keeping /v1 unchanged.