Qubole AWS Trust Abuse Shows Why Dormant Cloud Integrations Stay Dangerous An attacker used credentials associated with Qubole's AWS account to enter multiple c...
Lucas Oliveira
Research
GMO Onamae Cloud Breach: When a Hosted Desktop Becomes a Trading-Risk Control Plane GMO Internet’s Onamae.com Desktop Cloud incident shows how a compromise of a...
Lucas Oliveira
Research
ConnectWise Cloud Backup: Microsoft 365 Access Incident | 2026 Executive Summary On October 15, 2026, attackers abused a compromised ConnectWise Cloud Backup cr...
Lucas Oliveira
Research
ConnectWise SkyKick: Compromised Credential Hits 173 M365 Tenants | 2026 Executive Summary Unknown threat actors used a compromised Microsoft 365 credential bel...
Lucas Oliveira
Research
ASOS cyber incident: why hijacked customer notifications deserve breach-level response ASOS has confirmed that an unauthorised customer notification was sent to...
Lucas Oliveira
Research
Microsoft Entra ID CVSS 10 RCE is a trust-plane warning Security teams should treat CVE-2026-69836 as a serious [vulnerability](https://invaders.ie/resources/gl...
Lucas Oliveira
Research
SAP Commerce Cloud CVE-2026-58231 Is a Reminder That Patch Windows Are Now Measured in Days SAP's August Patch Day shipped a maximum-severity fix for SAP Commer...
Lucas Oliveira
Research
CVE-2026-39987 puts exposed Marimo notebooks on a fast credential-theft path CVE-2026-39987 is a sharp reminder that smaller developer and data-science platform...
Lucas Oliveira
Research
CVE-2026-34040 puts Docker image-mount trust on the host-root risk path CVE-2026-34040 is the kind of Docker bug that changes the conversation from ordinary con...
Lucas Oliveira
Research
European Commission breach shows how stolen cloud secrets can spill across shared public platforms The latest details on the European Commission cloud incident...
Lucas Oliveira
Research