← Latest

#cloud

1. Cloud Threat Emulation on Autopilot: Context is Everything

   elastic.co Nov 6, 2026 cloudtoolingdetection notes

2. M365 Token Spray and Replay Campaign Compromises Business Email Accounts

   huntress.com Nov 6, 2026 cloudincidentvulnidentityprivacyctidetectioncampaign-compromises notes

3. GitHub’s model for secret detection: Finding more secrets with less noise

   github.blog Nov 6, 2026 appseccloudidentityaitooling notes

4. Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure

   cloud.google.com Nov 6, 2026 appseccloudctisupply-chain notes

5. MadApe: The Code That Opens the Door

   group-ib.com Nov 6, 2026 researchcloudvulnidentityctitooling notes

6. Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers

   thehackernews.com Nov 6, 2026 appseccloudvulnmalwareaichrome-extensionbrowser notes

7. Threat actors use agentic AI tooling to find and abuse exposed secrets

   microsoft.com Nov 6, 2026 appseccloudvulnidentityaiprivacyartexctitooling notes

8. tl;dr sec #353 — A Thousand Fewer Paths to Root

   tldrsec.com Nov 5, 2026 cloudnewsletter notes

9. The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach

   securelist.com Nov 5, 2026 researchcloudincidentprivacyctidetectionstorm-2603 notes