Skip to content
Surge in Cloud Vulnerabilities Linked to AI Models Raises Security Risks

Surge in Cloud Vulnerabilities Linked to AI Models Raises Security Risks

First seen 10 Nov 2026, 16:20 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 16:21 UTC
  • •High and critical vulnerabilities in cloud workloads surged from 4 to 16 in six months.
  • •44.5% of cloud incidents in early 2026 were linked to software vulnerabilities.
  • •Long-lived credentials pose a significant risk, with many users having outdated access keys.

A report by Datadog reveals that the median number of high or critical vulnerabilities in cloud workloads has increased fourfold from May to November 2026, rising from four to 16 vulnerabilities. This surge is attributed to the impact of frontier AI models, which have made it easier for malicious actors to exploit software vulnerabilities. The report highlights that 44.5% of cloud incidents in the first half of 2026 were due to software vulnerabilities. Long-lived credentials, particularly in cloud-hosted AI inference services, are noted as a significant risk factor, with nearly 30% of AWS IAM and Google Cloud Service Account users having access keys older than three years. The findings emphasize the urgent need for organizations to enhance their cloud security measures to mitigate these risks. Tools like Pacu and TruffleHog are being used to identify over-permissioned credentials, which are prime targets for attackers. The report calls for organizations to adopt security practices that limit the blast radius of compromised applications.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-05-01
Initial surge of vulnerabilities reported
The median number of high/critical vulnerabilities in cloud workloads was reported as four.
Infosecurity-Magazine
2026-06-01
Vulnerabilities increase to 14
The median number of high/critical vulnerabilities in cloud workloads increased to 14.
Infosecurity-Magazine
2026-11-10
Current vulnerabilities reported at 16
The median number of high/critical vulnerabilities in cloud workloads reached 16, marking a fourfold increase since May.
Infosecurity-Magazine

More articles in this cluster (3)

Following this threat?

Track DataDog in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What caused the increase in vulnerabilities?
The increase is attributed to the impact of frontier AI models that facilitate exploitation of software vulnerabilities.
How urgent is the situation for cloud security?
The situation is urgent as the number of vulnerabilities has surged significantly, affecting real-world applications.
What can organizations do to mitigate risks?
Organizations should enhance their cloud security measures, focusing on managing long-lived credentials and adopting best practices.