Tag

cloud security

4 stories

Ransomware Strikes Colombian Justice Ministry Ahead of Presidential Transition

Colombia's Ministry of Justice was hit by a ransomware attack on August 2, affecting parts of its IT infrastructure and degrading several public-facing services just days before a national presidential handover. The disruption touched systems used for illicit-drug monitoring and legal processes; while some files were encrypted, the acting minister at the time, Cielo Rusinque, said publicly that there was no evidence of data exfiltration. The incident arrived amid heightened…

Saugata DattaAug 12, 20264 min read206

Cloud Computing

Copy Fail (CVE-2026-31431): A 4‑Byte Kernel Bug That Lets Attackers Gain Root on Major Linux Distros

Microsoft Defender Security Research recently disclosed CVE-2026-31431—nicknamed “Copy Fail”—a high‑severity local privilege escalation in the Linux kernel’s crypto subsystem that enables an unprivileged user to escalate to root. The vulnerability affects kernels released since 2017 and has broad implications for cloud and container environments because the exploit can corrupt in-memory representations of readable files (including setuid binaries) without changing the on-disk file. Although public proof-of-concept code exists and detected exploitation…

Saugata DattaMay 2, 20265 min read350

Cloud Computing

Google Completes $32 Billion Acquisition of Wiz

Google has finalized its acquisition of Wiz, the Israeli cloud and AI security company, in an all-cash transaction valued at $32 billion. The deal, announced as closed in March 2026, is the largest acquisition in Google’s history and represents a major move by Google Cloud to deepen its capabilities in cloud-native and AI security. Deal overview The acquisition brings the Wiz team into Google Cloud while keeping the Wiz brand…

Saugata DattaMar 12, 20263 min read731

Cloud Computing

Urgent Patching Required: Multiple VMware Aria Vulnerabilities Enable Remote Code Execution and Privilege Escalation

VMware’s Aria Operations — a cornerstone for many organizations’ cloud and infrastructure management — was thrust into the spotlight this week after Broadcom published VMSA-2026-0001, detailing three significant vulnerabilities. These flaws range from command injection that can lead to full remote code execution, to stored cross-site scripting that enables administrative actions, and a privilege escalation path from vCenter to Aria Operations. If you run Aria Operations as part of VMware…

Saugata DattaFeb 24, 20264 min read652

Ransomware Strikes Colombian Justice Ministry Ahead of Presidential Transition

Copy Fail (CVE-2026-31431): A 4‑Byte Kernel Bug That Lets Attackers Gain Root on Major Linux Distros

Google Completes $32 Billion Acquisition of Wiz

Urgent Patching Required: Multiple VMware Aria Vulnerabilities Enable Remote Code Execution and Privilege Escalation

Free Tools: IP, DNS, SSL