Cloud Security coverage from Firewall Scoop holds 22 articles, 16 of them reference guides. The newest was published on October 22, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include Cloud Security Alliance and CIS Benchmarks.
Malicious LiteLLM 1.107.0 release installed credential stealers via Python startup hooks, exposing cloud keys, developer tokens, and AI tool sessions to theft.
Microsoft exits a major UK cloud infrastructure agreement with Nscale, a move that impacts the firm's valuation and planned public listing.
Kubernetes RBAC prevents unauthorized command execution by binding specific user identities to precise API actions within your container orchestration environment.
Multi-cloud security fails when teams treat separate providers as a single environment, ignoring distinct identity models and network boundaries.
Misconfigured network rules allow internal services to harvest cloud credentials from metadata endpoints, granting attackers full account control without external access.
Admission controllers intercept API requests before persistence, allowing you to reject non-compliant configurations before they ever touch the cluster storage layer.
Data residency dictates where your information physically sits, determining which national laws apply to your data and preventing unexpected legal exposure.
Lee Robson outlines how Ingram Micro plans to help the channel manage AI and cloud adoption while maintaining security control at the upcoming London event.
Cloud firewalls filter traffic at the network edge, but they cannot inspect encrypted payloads or prevent lateral movement once an attacker breaches the perimeter.
Executives must treat AI agent access as a critical risk, moving from discovery to real-time remediation at machine speed, according to SailPoint leadership.
Oracle’s new runtime governs AI agents in Fusion apps, shifting from assistance to execution while raising analyst concerns about cloud lock-in.
Yandex Cloud confirms incident 2136 has affected a third data center, marking a significant expansion of the ongoing infrastructure failure for enterprise users.
DevSecOps shifts security left by embedding checks directly into automated pipelines, preventing breaches before code reaches production environments.
The base image remains the attack vector even after you remove the compromised container instance, requiring a full rebuild process.
Attackers often compromise build artifacts before deployment, leaving runtime defenses blind to the initial breach vector.
Federated identity shifts trust from passwords to cryptographic assertions, creating a single point of failure that attackers target with precision rather than brute force.
Zero Trust replaces the castle-and-moat model with continuous verification, ensuring that every request is treated as hostile until proven otherwise, regardless of location.
A single misconfigured role can turn a read-only service account into a full administrator within minutes.
Zero Trust Network Access replaces network perimeter trust with continuous, granular identity verification for every single request.
Secure access service edge fails when organizations treat it as a perimeter replacement rather than an identity-centric enforcement layer, leaving lateral movement open.
Cloud workload protection agents intercept system calls at the kernel level to block exploitation before the operating system processes the request, hiding the defense from the attacker.
A single overlooked permission can expand into full control of your cloud environment without triggering alarms, turning minor access into major risk.