Cloud & SaaS Security

24
Mar
Student Loan Servicer’s Open Cloud Bucket Leaks 2.5M Borrower Records

Student Loan Servicer’s Open Cloud Bucket Leaks 2.5M Borrower Records

A publicly accessible cloud storage bucket belonging to a major student loan servicer was discovered exposing personal and financial data
1 min read
24
Mar
Misconfigured Cloud Bucket Leaks 2.5M Student Loan Records, Alerts Triggered by Vendor

Misconfigured Cloud Bucket Leaks 2.5M Student Loan Records, Alerts Triggered by Vendor

A major student loan servicer suffered a data breach when a publicly accessible cloud storage bucket was left misconfigured, exposing
1 min read
24
Mar
Supply‑Chain Attack Hits LiteLLM 1.82.7‑1.82.8 via Compromised Trivy Scan

Supply‑Chain Attack Hits LiteLLM 1.82.7‑1.82.8 via Compromised Trivy Scan

Independent analysis has verified that the LiteLLM releases 1.82.7 through 1.82.8 were tampered with during distribution.
1 min read
24
Mar
GreyNoise Feeds Real‑Time Blocklists Directly into Google SecOps

GreyNoise Feeds Real‑Time Blocklists Directly into Google SecOps

GreyNoise has launched native integrations with Google’s security suite, feeding continuously updated blocklists and enriched threat intelligence straight into
1 min read
23
Mar
Public Cloud Bucket Leak Exposes 2.5 M Student Loan Records

Public Cloud Bucket Leak Exposes 2.5 M Student Loan Records

A leading student loan servicing platform inadvertently left an Amazon S3 bucket publicly accessible, allowing anyone on the internet to
1 min read
23
Mar
Interlock Ransomware Hijacks Enterprise Firewalls for Persistent Access, AWS Alerts

Interlock Ransomware Hijacks Enterprise Firewalls for Persistent Access, AWS Alerts

Amazon Web Services’ threat‑intelligence team has uncovered a new Interlock ransomware campaign that specifically compromises enterprise firewalls. By exploiting
1 min read
23
Mar
Misconfigured Cloud Bucket Leaks Data of 2.5 M Student Loan Borrowers

Misconfigured Cloud Bucket Leaks Data of 2.5 M Student Loan Borrowers

A major student‑loan servicer inadvertently exposed the personal and financial records of roughly 2.5 million borrowers when an
1 min read
16
Mar

SSH Scan Surge Signals Opportunistic Threat Campaigns

The latest Internet Storm Center Stormcast podcast reports a sharp rise in SSH and Telnet scanning across its worldwide sensor
16
Mar
Student Loan Servicer Leak Exposes 2.5M Records via Mis‑Configured Cloud

Student Loan Servicer Leak Exposes 2.5M Records via Mis‑Configured Cloud

A major student loan servicer suffered a data breach after an unsecured cloud storage bucket was discovered by threat actors.
1 min read
16
Mar
Cloudflare Deploys AI‑Powered Account Abuse Shield and Logic‑Flaw Scanner

Cloudflare Deploys AI‑Powered Account Abuse Shield and Logic‑Flaw Scanner

Cloudflare has rolled out Account Abuse Protection, a service that fuses AI‑driven detection of malicious login activity with an
1 min read