Cloud & SaaS Security News | Hexnode Threat Watch

Cloud and SaaS

litellm exposed admin key

LiteLLM Exposed Admin Key: What Wiz Research Found

Sep 11

9 min read

AdaptHealth data breach

AdaptHealth Data Breach: Contractor Account Compromise, Cloud Apps, and Healthcare IAM Lessons

Sep 10

7 min read

ChatGPT Gmail Exfiltration Flaw Enterprise AI App Governance and XDR Lessons

ChatGPT Gmail Exfiltration Flaw: Enterprise AI App Governance and XDR Lessons

Sep 9

6 min read

Invisible Unicode Phishing Splits Words to Evade Email Filters

Invisible Unicode Phishing Splits Words to Evade Email Filters

Sep 7

7 min read

French Hospital Fine Shows How One Compromised Account Can Expose an Entire Patient System

French Hospital Fine Shows How One Compromised Account Can Expose an Entire Patient System

Sep 4

6 min read

cve 2026 19949

CVE-2026-19949: All-in-One WP Migration Plugin Under Attack

Sep 3

6 min read

Aesto Health AWS Breach Exposes Millions of Patient Records

Aesto Health AWS Breach Exposes Millions of Patient Records

Sep 2

5 min read

TWINLOOT Hides C2 in Microsoft 365 to Steal Credentials and Pivot Internally

TWINLOOT Hides C2 in Microsoft 365 to Steal Credentials and Pivot Internally

Sep 1

4 min read

ownCloud KEV Exploitation Turns WebDAV Defaults Into Nuclear Research Data Theft

ownCloud KEV Exploitation Turns WebDAV Defaults Into Nuclear Research Data Theft

Sep 1

6 min read

mckesson breach

McKesson Breach: How a Vishing Call Turned Into an Okta and Salesforce Incident

Sep 1

6 min read

Nearly 700 AI Agents Coordinated in the Hugging Face Attack

Nearly 700 AI Agents Coordinated in the Hugging Face Attack

Aug 28

8 min read

Arista-VeloCloud-CVE-2026-16812-Exploited-SD-WAN-Zero-Day-Response-Guide

Arista VeloCloud CVE-2026-16812 Exploited: SD-WAN Zero-Day Response Guide

Aug 20

6 min read

AI coding agent sandbox escape

AI Coding Agent Sandbox Escapes: Endpoint Security Lessons

Aug 19

5 min read

City-Forum Targets Salesforce and ServiceNow Portal

City-Forum Targets Salesforce and ServiceNow Portals

Aug 17

10 min read

CVE-2026-18577 How Attackers Used N-centrals Take Control to Plant a Cloudflare Tunnel Backdoor

CVE-2026-18577: How Attackers Used N-central’s Take Control to Plant a Cloudflare Tunnel Backdoor

Aug 10

11 min read

snowflake data theft

Snowflake Data Theft Case: Guilty Plea Exposes MFA Gaps

Aug 6

5 min read

amgen data breach

Amgen Data Breach: What the Disclosure Confirms and Omits

Aug 5

6 min read

cve 2026 6875

ServiceNow CVE-2026-6875 Exploitation: AI Platform Patch and Detection Guidance

Jul 23

5 min read

Claude Chrome Extension Flaw

Claude Chrome Extension Flaw: What It Means for Enterprise AI Security

Jul 23

7 min read

wp2shell wordPress vulnerabilities

WP2Shell WordPress Vulnerabilities: Enterprise Response Guide

Jul 22

6 min read

Critical NGINX Heap Overflow Puts Patch Management Back in Focus

Critical NGINX Heap Overflow Puts Patch Management Back in Focus

Jul 21

6 min read

u boot vulnerabilities

U-Boot Vulnerabilities Highlight a Critical Blind Spot in Enterprise Firmware Security

Jul 14

5 min read

Fake-Payment-SDKs-Turn-Developer-Dependencies-Into-Credential-Theft

Fake Payment SDKs Turn Developer Dependencies Into Credential Theft

Jul 10

5 min read

accenture data breach

Accenture Data Breach Confirmed: Claimed DevOps Secrets Raise Enterprise Security Concerns

Jul 8

6 min read

duneslide

DuneSlide Cursor AI Flaws: Prompt Injection Meets Developer Endpoint RCE

Jul 6

7 min read

Exposed-Display-Controllers-Show-Why-Device-Fleets-Need-Patch-Discipline

Exposed Display Controllers Show Why Device Fleets Need Patch Discipline

Jul 1

4 min read

Klue OAuth Breach Exposes the Hidden Risk of SaaS Integration Trust

Klue OAuth Breach Exposes the Hidden Risk of SaaS Integration Trust

Jun 22

6 min read

Miasma Source Leak Raises Copycat Risk for Developer Supply-Chain Attacks

Miasma Source Leak Raises Copycat Risk for Developer Supply-Chain Attacks

Jun 17

5 min read

Miasma Malware Hits Red Hat npm Packages in Developer Credential Theft Campaign

Red Hat npm Packages Compromised by Miasma Credential-Stealing Malware

Jun 5

8 min read

Operation Dragon Weave Uses Rustcloak and Azureveil Against Czech and Taiwan Targets

Operation Dragon Weave Uses Rustcloak and Azureveil Against Czech and Taiwan Targets

Jun 4

6 min read

kali365 phishing kit

Kali365 Phishing Kit Expands Beyond Microsoft 365 Through Device Code OAuth Attacks

Jun 4

6 min read