Newsletter
Articles
AI Security
Tools
Practices

Login Subscribe

Cloud & SaaS Security

Open S3 Bucket Exposes 2.5 Million Student Loan Records

Open S3 Bucket Exposes 2.5 Million Student Loan Records

A student loan servicing platform suffered a data breach when attackers discovered a publicly accessible Amazon S3 bucket that lacked any access controls. The misconfigured bucket allowed anyone on the internet to list and download its contents, and the threat actors quickly harvested personal data for roughly 2.5 million

7secure 03 Mar 2026

GoAnywhere MFT Zero‑Day Slips Past Firewalls, Lets Storm‑1175 Run Code

GoAnywhere MFT Zero‑Day Slips Past Firewalls, Lets Storm‑1175 Run Code

Microsoft Threat Intelligence disclosed that the Storm‑1175 threat group exploited CVE‑2025‑10035, a critical deserialization flaw in the license servlet of GoAnywhere Managed File Transfer. The vulnerability allowed the attackers to execute arbitrary code on the server while using normal HTTPS traffic, making the exploit blend in with

7secure 03 Mar 2026

Zero‑Trust Lateral Defense: VMware vDefend Shields Inside Networks

Zero‑Trust Lateral Defense: VMware vDefend Shields Inside Networks

VMware’s vDefend platform expands zero‑trust principles beyond the perimeter, delivering continuous, real‑time monitoring of east‑west traffic across heterogeneous data‑center, cloud, and edge environments. By combining granular micro‑segmentation with built‑in threat analytics, vDefend automatically isolates suspicious workloads, enforces least‑privilege policies, and triggers rapid

7secure 25 Feb 2026

2️⃣ GreyNoise State of the Edge Report Highlights Attack Hotspots

2️⃣ GreyNoise State of the Edge Report Highlights Attack Hotspots

The 2026 GreyNoise State of the Edge report analyzes billions of internet‑wide observations, revealing where adversary activity clusters and where defensive controls lag. Findings underscore heightened risk for edge deployments and the need for adaptive, data‑driven blocking strategies. Categories: Threat Intelligence, Cloud & SaaS Security, SOC & Automation

7secure 25 Feb 2026

Native Cloud‑Logging Uncovers Scattered Spider and Halcyon Silk Typhoon Tactics

Native Cloud‑Logging Uncovers Scattered Spider and Halcyon Silk Typhoon Tactics

Unit 42 discovered that attackers are exploiting built‑in cloud‑logging services to hide their movements while still leaving forensic breadcrumbs. By configuring logs from services such as AWS CloudTrail, Azure Activity Log, and Google Cloud Audit, the researchers were able to reconstruct the full kill chain of threat actors,

7secure 10 Feb 2026

Unified Cloud Log Fusion Exposes Multi‑Cloud Threat Actors in Real Time

Unified Cloud Log Fusion Exposes Multi‑Cloud Threat Actors in Real Time

Unit42 unveiled a detection framework that aggregates and normalizes logs from the three major cloud providers—AWS, Azure, and Google Cloud—into a single, searchable data set. By correlating identity, network, and API activity across these environments, the system can trace the full kill chain of adversaries as they hop

7secure 10 Feb 2026

Cloudflare Launches Serverless Post‑Quantum Matrix Homeserver for Defenders

Cloudflare Launches Serverless Post‑Quantum Matrix Homeserver for Defenders

Cloudflare has published a step‑by‑step guide to deploy a Matrix homeserver entirely on its Workers platform, using post‑quantum cryptographic primitives. The solution promises a highly scalable, low‑latency chat service that is resistant to future quantum attacks, while eliminating the need for traditional server management and reducing

7secure 04 Feb 2026

CyberSecurity daily updates

Email address

Company

Subscribe
About
Contact
Privacy Policy
Terms & Conditions

© 2026 7secure. All rights reserved.