<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Zeem Tech Solution — Cloud &amp; Cybersecurity Hub</title>
    <link>https://cloud.zeemtechsolution.com/</link>
    <description>Cloud and cybersecurity news for the engineers who run the infrastructure: AWS, Microsoft Azure, Google Cloud and Microsoft 365 security alerts, CVE bulletins, tutorials and free tools.</description>
    <language>en</language>
    <lastBuildDate>Thu, 03 Sep 2026 17:14:13 GMT</lastBuildDate>
    <atom:link href="https://cloud.zeemtechsolution.com/feed.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title><![CDATA[Malware campaign hijacks Microsoft 365 tenants through malicious OAuth consent apps]]></title>
      <link>https://cloud.zeemtechsolution.com/article-m365-oauth-consent-hijacking.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-m365-oauth-consent-hijacking.html</guid>
      <pubDate>Mon, 31 Aug 2026 05:45:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Sana Farooq]]></dc:creator>
      <category>Microsoft 365</category>
      <description><![CDATA[Attackers are registering look-alike enterprise applications and phishing global admins into granting `Mail.ReadWrite` and `Directory.ReadWrite.All`, sidestepping MFA entirely. We break down the consent-grant chain and the audit-log queries that surface it.]]></description>
    </item>
    <item>
      <title><![CDATA[CISA flags two AWS metadata-service exploits after credential-theft wave]]></title>
      <link>https://cloud.zeemtechsolution.com/article-cisa-aws-imds-credential-theft.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-cisa-aws-imds-credential-theft.html</guid>
      <pubDate>Mon, 31 Aug 2026 03:20:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Hamza Iqbal]]></dc:creator>
      <category>AWS</category>
      <description><![CDATA[Both entries abuse IMDSv1 endpoints reachable from vulnerable web apps to mint temporary role credentials. Enforcing IMDSv2 with a hop limit of one closes the path — here is the org-wide policy plus a GuardDuty detection to catch what slipped through.]]></description>
    </item>
    <item>
      <title><![CDATA[Critical zero-day in cloud infrastructure orchestrator exposes the control plane to unauthenticated users]]></title>
      <link>https://cloud.zeemtechsolution.com/article-cloud-orchestrator-zero-day-cve-2026-3184.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-cloud-orchestrator-zero-day-cve-2026-3184.html</guid>
      <pubDate>Sun, 30 Aug 2026 21:15:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Ayesha Noor]]></dc:creator>
      <category>Cybersecurity</category>
      <description><![CDATA[Tracked as CVE-2026-3184, the flaw sits in the admission webhook and is trivially reachable wherever the API is internet-facing. Vendor patches shipped overnight for 4.2.x and 4.1.x; a network-policy workaround holds the line until you can roll them.]]></description>
    </item>
    <item>
      <title><![CDATA[Azure Sentinel threat hunting: six KQL notebooks for hybrid lateral movement]]></title>
      <link>https://cloud.zeemtechsolution.com/article-azure-sentinel-threat-hunting-kql.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-azure-sentinel-threat-hunting-kql.html</guid>
      <pubDate>Sun, 30 Aug 2026 16:20:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Bilal Rehman]]></dc:creator>
      <category>Azure</category>
      <description><![CDATA[Each notebook pairs a hypothesis with the exact `SigninLogs` and `DeviceLogonEvents` joins that prove or kill it — impossible travel, dormant-account revival, Kerberoasting fallout, and three more.]]></description>
    </item>
    <item>
      <title><![CDATA[Service-account key sprawl still haunts Google Cloud: 62% of audited projects ship long-lived JSON keys]]></title>
      <link>https://cloud.zeemtechsolution.com/article-gcp-service-account-key-sprawl.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-gcp-service-account-key-sprawl.html</guid>
      <pubDate>Sun, 30 Aug 2026 09:40:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Usman Tariq]]></dc:creator>
      <category>GCP</category>
      <description><![CDATA[We reviewed 340 customer projects over six months. Workload Identity Federation is available in every one of them, yet downloaded keys keep landing in CI variables and private repos. The migration is shorter than most teams expect.]]></description>
    </item>
    <item>
      <title><![CDATA[Kubernetes hardening: nine weaknesses a pentest lab exposes, and the policy that blocks each one]]></title>
      <link>https://cloud.zeemtechsolution.com/article-kubernetes-hardening-lessons-pentest-lab.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-kubernetes-hardening-lessons-pentest-lab.html</guid>
      <pubDate>Sat, 29 Aug 2026 14:00:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Ayesha Noor]]></dc:creator>
      <category>Cybersecurity</category>
      <description><![CDATA[A walkthrough on a deliberately weak lab cluster — service-account token exposure, over-permissive RBAC bindings, host-path escapes — with the admission policy that closes each gap. For authorised testing on systems you own.]]></description>
    </item>
    <item>
      <title><![CDATA[Rolling out Purview DLP without drowning your helpdesk in false positives]]></title>
      <link>https://cloud.zeemtechsolution.com/article-purview-dlp-rollout-without-false-positives.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-purview-dlp-rollout-without-false-positives.html</guid>
      <pubDate>Sat, 29 Aug 2026 08:30:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Sana Farooq]]></dc:creator>
      <category>Microsoft 365</category>
      <description><![CDATA[Simulation mode first, policy tips second, blocking last. We share the three-week phased rollout and the PowerShell that reports on match volume before you enforce a single rule.]]></description>
    </item>
    <item>
      <title><![CDATA[Zeem Cloud Posture Scanner 3.4 adds Entra ID and GKE Autopilot checks]]></title>
      <link>https://cloud.zeemtechsolution.com/article-zeem-cloud-posture-scanner-34.html</link>
      <guid isPermaLink="true">https://cloud.zeemtechsolution.com/article-zeem-cloud-posture-scanner-34.html</guid>
      <pubDate>Fri, 28 Aug 2026 12:00:00 GMT</pubDate>
      <dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/"><![CDATA[Zeem Tech Desk]]></dc:creator>
      <category>Downloads</category>
      <description><![CDATA[The open-source scanner now ships 128 read-only checks across AWS, Azure, GCP and Microsoft 365, exports to SARIF and CSV, and runs in a container with a scoped audit role. Release notes and file hashes inside.]]></description>
    </item>
  </channel>
</rss>
