CloudSec Wine

Public

View Channel

3.9M

775K

290

Can't Join? @cloud_sec

2.2k Members

Updated: May 5, 2026 at 7:05 PM

CloudSec Wine

All about cloud security Contacts: @AMark0f @dvyakimov About DevSecOps: @sec_devops

@cloud_sec is a growing community focused on about and contacts and related topics

Ranking

Global Ranking

#456

Language Ranking

#45

Category Ranking

#23

-1

Participant Growth (Last 3 Days)

Total: 2.2K

24h growth: +0 0%

Latest Posts

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🤖 NomShub: Weaponizing Cursor's Remote Tunnel Through Indirect Prompt Injection and Sandbox Breakout

NomShub is a critical vulnerability chain in the Cursor AI code editor where a malicious repository can silently hijack a developer's machine, combining indirect prompt injection, a sandbox escape via shell builtins, and Cursor's built-in remote tunnel to give attackers persistent, undetected shell access triggered simply by opening a repo.

https://www.straiker.ai/blog/nomshub-cursor-remote-tunneling-sandbox-breakout

#AI

333

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🔶 Launching S3 Files, making S3 buckets accessible as file system

Amazon S3 Files makes S3 buckets accessible as high-performance file systems on AWS compute resources, eliminating the tradeoff between object storage benefits and interactive file capabilities while enabling seamless data sharing with ~1ms latencies.

https://aws.amazon.com/ru/blogs/aws/launching-s3-files-making-s3-buckets-accessible-as-file-systems

#aws

310

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🔶 Amazon S3 starts rolling out new security best practice to new and existing buckets by default

S3 is now deploying a new default bucket security setting which will automatically disable server-side encryption with customer-provided keys (SSE-C) for all new general purpose buckets.

https://aws.amazon.com/ru/about-aws/whats-new/2026/04/s3-default-bucket-security-setting

#aws

311

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🤖 How Command Injection Vulnerability in OpenAI Codex Leads to GitHub Token Compromise

BeyondTrust Phantom Labs recently identified a critical command injection vulnerability in OpenAI Codex that allowed for the theft of GitHub User Access Tokens.

https://www.beyondtrust.com/blog/entry/openai-codex-command-injection-vulnerability-github-token

#AI

373

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🔶 Unexpected Routing Behaviour in AWS with VPC Peering and NAT Gateway

When routing VPC peering traffic through an internal NAT gateway in AWS, response traffic bypasses route tables via connection tracking, making all subnets in the peered VPC reachable even without return routes configured. AWS confirmed this is "expected behaviour.".

https://labs.reversec.com/posts/2026/03/unexpected-routing-behaviour-in-aws-with-vpc-peering-and-nat-gateway

#aws

292

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🔶 aws-preflight

Check your AWS CLI commands for security risks before you run them.

https://github.com/gabrielPav/aws-preflight

#aws

346

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🔶 AWS Security Agent on-demand penetration testing now generally available

AWS Security Agent on-demand penetration testing is now GA, offering autonomous 24/7 multi-cloud pen testing combining SAST, DAST, and context-aware agentic AI.

https://aws.amazon.com/ru/blogs/security/aws-security-agent-on-demand-penetration-testing-now-generally-available/

#aws

392

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🔴 Double Agents: Exposing Security Blind Spots in GCP Vertex AI

Unit 42 researchers found that GCP Vertex AI Agent Engine's default P4SA service account has excessive permissions, enabling credential theft via the metadata service. This allows privilege escalation to read all consumer GCS buckets, access restricted Google-internal Artifact Registry container images, and expose internal source code.

https://unit42.paloaltonetworks.com/double-agents-vertex-ai

#gcp

367

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

🔶 Enforcing AI Governance Across AWS Organizations

Learn how to enforce AI governance across AWS organizations using Bedrock guardrails, MCP server controls, model availability rules, and API restrictions to reduce risk and improve security.

https://sonraisecurity.com/enforcing-ai-governance-across-aws-orgs

#aws

359

CloudSec Wine

Apr 23, 2026, 07:04 AM

📷 Photo

📤 Threat Actors Abuse http://Railway.com/ PaaS as Microsoft 365 Token Attack Infrastructure

Railway PaaS is being weaponized as a clean token replay engine in an active AiTM and device code phishing campaign impacting 268+ M365 organizations and 100+ MSPs.

https://www.huntress.com/blog/railway-paas-m365-token-replay-campaign

#PaaS

403

Showing 10 of 10 posts

No more posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Magic Tipster 🧙

970

tapswap community

12.5m0

alpine linux espanol

Loading recommended channels...

CloudSec Wine

CloudSec Wine

Ranking

Participant Growth (Last 3 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

Magic Tipster 🧙

tapswap community

alpine linux espanol

FreeFont.Pro — Best Free Fonts Daily

EZKROW

Tricks Hub | Latest Tricks

[🛡] MTProxyBoy

clover's corner.𖥔 ݁ ˖𓂃.☘︎ ݁˖

Related Telegram Channels

Magic Tipster 🧙

tapswap community

alpine linux espanol

FreeFont.Pro — Best Free Fonts Daily

EZKROW

Tricks Hub | Latest Tricks

[🛡] MTProxyBoy

clover's corner.𖥔 ݁ ˖𓂃.☘︎ ݁˖

User Reviews (0)

Latest Posts