Daniel Head

Juggling multiple cloud providers is complicated enough without each one failing in different places. But that's what Intruder’s 2026 Cloud Security Index found: the issues that dominate on AWS barely overlap with those on Google Cloud, and Azure looks different again. For security teams, this doesn't just create more work: it fragments teams' understanding of risk, makes prioritization harder, and can slow down remediation.

Not every breach starts with a CVE. The entry point can be something as simple as an internet-facing admin panel, where a password gets guessed, reused from another breach, or socially engineered. When a vulnerability does drop, anything affected and exposed to the internet is immediately at risk. Take MongoBleed (CVE-2025-14847) — it allowed attackers to steal credentials, API keys, and session tokens directly from server memory without authentication.

A new critical vulnerability, CVE-2026-41940, has been disclosed in cPanel & WHM, allowing unauthenticated attackers to gain root access on the underlying server and from there, trivial remote code execution (RCE). With over a million cPanel instances exposed to the internet, the affected population is enormous. What is CVE-2026-41940? CVE-2026-41940 is a pre-authentication flaw that lets an attacker escalate directly to root on the cPanel host, without the need for credentials.