www.datadoghq.com Surge in Cloud Vulnerabilities Linked to AI Models Raises Security Risks
Article Content
- •High and critical vulnerabilities in cloud workloads surged from 4 to 16 in six months.
- •44.5% of cloud incidents in early 2026 were linked to software vulnerabilities.
- •Long-lived credentials pose a significant risk, with many users having outdated access keys.
A report by Datadog reveals that the median number of high or critical vulnerabilities in cloud workloads has increased fourfold from May to November 2026, rising from four to 16 vulnerabilities. This surge is attributed to the impact of frontier AI models, which have made it easier for malicious actors to exploit software vulnerabilities. The report highlights that 44.5% of cloud incidents in the first half of 2026 were due to software vulnerabilities. Long-lived credentials, particularly in cloud-hosted AI inference services, are noted as a significant risk factor, with nearly 30% of AWS IAM and Google Cloud Service Account users having access keys older than three years. The findings emphasize the urgent need for organizations to enhance their cloud security measures to mitigate these risks. Tools like Pacu and TruffleHog are being used to identify over-permissioned credentials, which are prime targets for attackers. The report calls for organizations to adopt security practices that limit the blast radius of compromised applications.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track DataDog in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What caused the increase in vulnerabilities?
How urgent is the situation for cloud security?
What can organizations do to mitigate risks?
Continue Reading
Critical RCE and LPE Vulnerabilities in Quest Foglight for Databases On November 3, 2026, the Zero Day Initiative disclosed multiple critical vulnerabilities in Quest Foglight for Databases, including six remote code execution (RCE) flaws and two local privilege escalation (LPE) vulnerabilities. The most severe RCE vulnerabilities, CVE-2026-92189 and CVE-2026-92190, allow…