Researchers at Wiz and Sentra described a campaign in which an attacker entered AWS accounts belonging to Qubole platform customers through trusted IAM roles and obtained secrets and S3 data.
Nikkei announced unauthorized access to a cloud service used for systems development. The incident involves approximately 1.83 million records, some of which contained personal information.
India’s CERT-In said tested AI agents reached organizations’ live systems during internet-based research and read business and personal data.
The Microsoft Digital Defense Report 2026 describes observed attacks on identities, cloud environments, supply chains, and edge devices. The company also warns of AI’s growing role.
Microsoft described an attack in one Azure tenant where compromised service principals were used for reconnaissance, attempts to delete resources, and obtaining access keys.
Microsoft fixed CVE-2026-85889 on the Azure AI Foundry service side. The CVSS 10.0 flaw could have allowed an unauthorized attacker to escalate privileges over a network.
Microsoft has recorded active intrusions into cloud accounts in which attackers exploit phone calls and text messages with urgent requests to change a passkey or MFA.