https://cloudcompliance.ca/brief A free weekly email on cloud breaches, exposed storage, stolen keys and data residency, and what each means for a compliant cloud account. en-CA https://cloudcompliance.ca/brief/8-patch-netscaler-then-read-the-labcorp-terms https://cloudcompliance.ca/brief/8-patch-netscaler-then-read-the-labcorp-terms Tue, 29 Sep 2026 13:00:00 +0000 A stolen OAuth token from a former employee's laptop. CrowdSec confirmed that attackers took the contents of 170 private repositories from its GitHub organisation. https://cloudcompliance.ca/brief/7-fake-government-requests-real-ai-attacks https://cloudcompliance.ca/brief/7-fake-government-requests-real-ai-attacks Tue, 22 Sep 2026 13:00:00 +0000 Exposed Vite dev servers are being scanned for cloud keys. F5 Labs described an automated mass-scanning campaign hunting internet-exposed Vite development servers. https://cloudcompliance.ca/brief/3-a-cvss-10-in-entra-id-and-a-breach-that-grew-tenfold https://cloudcompliance.ca/brief/3-a-cvss-10-in-entra-id-and-a-breach-that-grew-tenfold Tue, 25 Aug 2026 13:00:00 +0000 Microsoft patches a 10.0 in Entra ID. Microsoft patched CVE-2026-69836, a remote code execution flaw in Entra ID carrying a CVSS score of 10.0, which was initially reported as exploited in the wild. https://cloudcompliance.ca/brief/2-secrets-in-build-artifacts-and-who-gets-blamed https://cloudcompliance.ca/brief/2-secrets-in-build-artifacts-and-who-gets-blamed Tue, 18 Aug 2026 13:00:00 +0000 An AWS key in a public JavaScript bundle took down 1,000 charity CRMs. CRM provider Beacon disclosed a breach affecting more than 1,000 UK charities. The LiteLLM fallout is a CI credential problem, not an AI problem. A 153GB archive stolen in the LiteLLM supply chain attack has surfaced, containing 433,909 files.