[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI6idCN83yR75jWRadG_dHCPilDW1g5eC6IQOOfUkNdY":3},{"article":4,"iocs":43},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":23,"category":24,"article_tags":27},"2ccb8e5e-124c-4dde-9aaa-34e0eea0feac","With Complex Cloud Integrations, Small Errors Lead to Major Compromises","with-complex-cloud-integrations-small-errors-lead-to-major-compromises-6b8c95","Researchers discover an exploit chain combining over-permissioned roles, secrets discovery, and non-human identities that could have compromised a popular automation service.","Security researchers have identified a critical exploit chain affecting a popular cloud automation service that combines multiple vulnerabilities: over-permissioned IAM roles, exposed secrets discovery, and non-human identity misconfigurations. The attack demonstrates how seemingly minor cloud configuration errors can cascade into full service compromise. The vulnerability highlights the risks of complex cloud integrations where permission boundaries are poorly defined.","Researchers uncover exploit chain exploiting over-permissioned roles and secrets in cloud automation service.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fvulnerabilities-threats\u002Fcomplex-cloud-integrations-small-errors-compromises","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt33ea1925a9f97ba7\u002F6a18a8b047696a7d03d6ca07\u002Frube-goldberg-machine-complexity-T_N_Sursock-shutterstock.jpg?width=1280&auto=webp&quality=80&disable=upscale","2026-05-29T13:00:01+00:00","2026-05-29T14:00:18.843765+00:00",7,[18,21],{"name":19,"type":20},"Cloud IAM (Identity and Access Management)","technology",{"name":22,"type":20},"Cloud Automation Services","c70f3a41-2f0c-4608-870d-b8cbcd8be076",{"id":23,"icon":11,"name":25,"slug":26},"Cloud Security","cloud-security",[28,33,38],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",[]]