A key difference in the way cloud computing and on-premises security bugs are handled is creating a rift between researchers and cloud service providers. First issued in 1999, Common Vulnerabilities ...

It’s unclear if Microsoft customers were breached during the months-long period where the #ChaosDB bug in Jupyter Notebooks was exploitable. A critical security vulnerability in Microsoft’s Azure ...

The popular continuous-delivery platform has a path-traversal bug (CVE-2022-24348) that could allow cyberattackers to hop from one application ecosystem to another. A high-severity security ...

GitHub's fifth annual Bug Bounty program has expanded the scope and rewards for security bugs found in its products. GitHub's security bug bounty program in 2019 includes all first-party services ...

Another VMware vulnerability has been exploited in the wild, according to the Cybersecurity and Infrastructure Security Agency (CISA). CVE-2026-22719 is a high severity (CVSS 8.1) command injection ...

Google has fixed a critical flaw in its Google Cloud Platform's database service that researchers used to gain access to sensitive data and secrets, as well as escalate privileges to breach other ...

Earlier this week, fans spotted that many top-selling games on Xbox had their store pages updated to indicate cloud streaming support. Now, Microsoft is claiming that this was a bug, which has now ...

The operators of the Kinsing malware are targeting cloud environments with systems vulnerable to "Looney Tunables," a Linux security issue identified as CVE-2023-4911 that allows a local attacker to ...