Insights for the modern cloud
In-depth guides, tutorials, and best practices for AWS, Azure, GCP, and OCI.
AWS GPU Workstation Security: Final Part Covers Access, Encryption, and Monitoring
The fifth and final post in the AWS GPU workstation series details security controls for visual effects environments on EC2, including network access, DCV session protection, credential management, encryption, and operational monitoring.
AWS GPU Workstation Security: Final Part Covers Access, Encryption, and Monitoring
The fifth and final post in the AWS GPU workstation series details security controls for visual effects environments on EC2, including network access, DCV session protection, credential management, encryption, and operational monitoring.
Self-Service Regional Failover with ARC Region Switch Behind Centralized Ingress
Application teams can now trigger regional failover independently using ARC Region Switch while security teams retain control of ingress proxies via Transit Gateway, Route 53 Private Hosted Zones, and VPC Lattice.
Why Kubernetes Network Policies Alone Can't Fix Insecure Protocols
ADB and WebRTC expose unencrypted traffic in multi-tenant clusters. Network policies block reachability but don't encrypt payloads or add authentication. You need protocol-aware controls.
Microsoft Details Post-Training Supply Chain Attacks on AI Coding Agents
Microsoft Defender Research and the AI Red Team reveal how poisoned datasets and model checkpoints can hijack coding agents to execute remote code and exfiltrate data.
Storm-3358 Deploys ARTEX AI Framework Against Financial Sector
Microsoft Threat Intelligence observed financially motivated actor Storm-3358 using the agentic AI offensive framework ARTEX to target financial organizations in October 2026.
Microsoft Finds Exploited Vulnerabilities Cluster in Small High-Impact CVE Subset
Microsoft analysis shows real-world exploitation concentrates in a tiny fraction of CVEs. Defenders should prioritize based on exploitation likelihood, exposure, and blast radius rather than chasing every vulnerability.
Google Cloud Security Summit: Agentic-Era Defenses from CodeMender to Auth Manager
Google Cloud unveiled machine-speed security tools at its Security Summit, including CodeMenter for autonomous vulnerability remediation, Auth Manager for agent identity, and expanded VPC Service Controls for identity-based perimeters.
LLMJacking Surges as Threat Actors Monetize Stolen Cloud Model Access
Google Threat Intelligence Group details how financially motivated clusters hijack enterprise LLM APIs, generating six-figure daily bills and reselling access through underground LLM Mixers.
Compute Engine API Multi-Versioning Goes GA with Date-Based Stable Releases
Google Cloud launches interface-based versioning for Compute Engine, adding immutable quarterly stable versions and preview releases while keeping /v1 unchanged.