Cloud misconfigurations, SaaS compromise, container escapes, and cloud-native attack patterns.
On Friday, Kiteworks told its global customer base to shut down its file-transfer system in a rolling window that ran roughly six hours per region and about nine hours end to end, on the strength of intelligence the customer cannot see, about an attack that has not happened.
If your two largest vendors went down on the same afternoon, would your continuity plan count that as one event or two?
Every cloud contract your company has signed for fifteen years splits responsibility the same way: the vendor secures the platform, you secure your settings. A new case shows that line has quietly moved to cover settings you never knew existed.
Last month the government set the quantum deadline. This month the companies that run your systems moved it closer, and the money moving underneath tells you why.
Last week we reported that the US government ordered Anthropic to switch off two AI models worldwide with no notice and no appeal. That was not the beginning of this story. It was the latest in a chain of events that had already convinced European governments to walk away from American software.
The European Commission published the Cloud and AI Development Act (CADA), a framework that divides cloud providers into four tiers based on how much sovereignty they offer. The higher the tier, the more sensitive the government contracts you can compete for. The catch: American cloud providers cannot reach the top two tiers without fundamentally restructuring how they operate. EU Vice President Henna Virkkunen framed the rationale directly: "We want to be sure nobody has a kill switch."