Topic
Cloud Service Dependency
Within the Topic facet, Cloud Service Dependency topic intelligence connects articles that share a specific subject, signal focus, or monitoring theme. The page gives readers a richer path through related reporting, source evidence, market actors, and infrastructure implications, with enough context to understand why the topic matters across company movements, governance decisions, regional exposure, and operational risk. Readers can compare recurring signals, affected organisations, public evidence, market context, service continuity, procurement, competition, compliance, and strategic planning questions behind the subject instead of stopping at a thin list of matching articles. It explains what the topic covers, which infrastructure actors or policies are involved, what evidence supports the coverage, and why the subject may matter for operators, customers, investors, and policy readers.
Global Cloud Services
Microsoft Storm-0558 and the signing-key failure that made cloud identity a public accountability problem
A 2016 consumer signing key, an enterprise token-validation defect, premium-gated audit data, and an unresolved key-acquisition path combined to let a state-linked actor read government cloud mail. The incident shows why accountability in a shared cloud must follow control over…
North America Cloud Services
Capital One's metadata breach: when cloud configuration became a liability chain
The 2019 Capital One breach did not show that public cloud is inherently unsafe, or that a customer can outsource accountability to its cloud provider. It showed how a web-facing configuration error, a metadata credential path, broad storage permissions, weak alert resolution…
Global Cloud Services
Meta's six-hour disappearance: control-plane coupling, DNS reachability, and accountability
The October 2021 outage did more than take Facebook, WhatsApp, and Instagram offline. It showed how a routine command could cross the boundary between maintenance and global communications, how an apparently sensible DNS health rule could amplify a backbone failure, and how…
Global Cloud Services
Fastly's latent bug and the accountability of a concentrated CDN edge
Fastly restored most of its network within 49 minutes on June 8, 2021, but the outage exposed a larger accountability problem: a geographically distributed edge can still have one software fate, while customers that buy reach, speed, and physical redundancy from a CDN may…
Global Cloud Services
SolarWinds Orion and the build-system compromise that turned a trusted update into public risk
The Orion compromise did not ask government customers to ignore a warning or install software from an unknown publisher. It used SolarWinds' own build and signing path to convert ordinary maintenance into an espionage channel. The lasting accountability question is therefore not…
Global Cloud Services
Kaseya VSA and the accountability gap inside managed service
The July 2021 Kaseya VSA ransomware incident showed how an ordinary small business can inherit the security and continuity decisions of a software vendor and a managed service provider several contracts away, while retaining almost none of the visibility or leverage needed to…
Global Cloud Services
3CX and the seven-day warning: accountability when a signed desktop update becomes the attack path
The 2023 compromise of the 3CX Desktop App showed that a valid signature can authenticate a dangerous release, endpoint telemetry can outrun a supplier's incident process, and the economics of receiving an inconvenient security report can shape how long customers remain exposed.
Global Cloud Services
One policy, every region: Google Cloud and the accountability of a global control plane
Google Cloud's June 2025 outage began with a malformed quota policy, not a failed data centre, yet it crossed regional boundaries in seconds, disabled the systems customers needed to understand the incident, and pushed recovery traffic into another overload. The event makes a…
Global Datacenter
The OVHcloud fire showed that data locality is not disaster separation
The March 2021 fire at OVHcloud's Strasbourg campus turned a physical incident into permanent data loss and a Europe-wide service shock. Its lasting accountability lesson is not that cloud customers should simply have bought "a backup," but that providers and customers must…
Global Cloud Services
Twilio and the customer-data multiplier behind one successful employee phish
Twilio's 2022 breach began with messages that made a false login page look like ordinary work, but its significance lies beyond the stolen employee credentials. A cloud communications provider concentrated customer support access, phone-number verification, authentication…
Global Cloud Services
The region customers can leave but not always escape: AWS US-East-1 and the price of resilience
AWS lets a customer place applications in several zones, several regions, or even several clouds. Yet some of the controls needed to identify an incident, add capacity, change routing, obtain credentials, open a support case, or complete a failover can still converge on one…
Global Cloud Services
The morning GitHub's correct security response looked exactly like an attack
When GitHub replaced an exposed RSA SSH host key in March 2023, the company removed a credible impersonation risk and simultaneously triggered the warning designed to stop customers from trusting an impersonator. The episode was not a disclosed compromise of customer…
Global Cloud Services
Snowflake's credential-theft campaign and the limits of shared responsibility
The 2024 Snowflake campaign did not require a demonstrated break in Snowflake's production platform. Attackers used customer credentials, entered customer instances through supported interfaces, and issued ordinary data commands with extraordinary consequences. That distinction…
Global Cloud Services
The console behind the public conversation: Twitter's 2020 takeover and the authority to speak
Twitter's July 2020 account takeover was publicly remembered as a $118,000 Bitcoin scam. That number is accurate but badly scaled to the risk. A small group reached an internal recovery surface that could change who controlled prominent accounts, expose private information, and…
Global Cloud Services
Atlassian Confluence and the patch-time asymmetry: who carries the risk after a fix ships?
Atlassian moved from a private report of an actively exploited Confluence zero-day to a public advisory and fixed releases in days. Customers still had to find every instance, interrupt service, upgrade safely, preserve evidence, investigate possible compromise, and decide when…
Global Cloud Services
IBM Cloud sells region choice through the physical limits of data centres and transit
IBM Cloud gives customers a visible geography of regions, zones and classic data-centre codes, but the useful diligence question starts after the location menu. A region only becomes resilient for a workload when the selected buildings, profiles, power systems, backbone paths…
Global Institutional
Toyota and the supplier outage that stopped production without a cyberattack headline
Toyota's August 2023 domestic plant shutdown was not a ransomware story, a factory-fire story, or a public-cloud outage story. It was a production-order system failure that prevented parts orders from moving through the manufacturing network, while the backup function failed on…
Global Institutional
Delta turned the CrowdStrike outage into a recovery-duty and supplier-liability test
Delta Air Lines did not cause the faulty security-content update that disabled Windows endpoints across the world on July 19, 2024. That fact matters, but it is not the end of the accountability question. Delta's slower recovery turned a supplier incident into an airline…
Global Cloud Services
Dyn showed that DNS outsourcing can become a common-mode failure
The 2016 Dyn attack did not take down the internet. It did something narrower and more instructive: it made many otherwise healthy services unreachable because a shared authoritative DNS provider was overwhelmed. The accountability question is therefore not only who launched a…
Global Cloud Services
Akamai and the false positive that made edge security an availability risk
A protective control can fail in two directions. It can miss hostile traffic, or it can misclassify legitimate traffic and make a working site unreachable to the people it is supposed to protect. Akamai's public record now contains both kinds of accountability signal: a 2026 Bot…