Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When it comes to managing cloud application usage in an organization, the challenges are anything but simple. On one side, users are constantly exposed to malicious links and risky apps. On the other, locking things down too tightly by broadly blocking access to services can cripple employee productivity. Ideally, you'd want a balance between security and productivity.

CVE-2025-55752 is a path traversal vulnerability in Apache Tomcat. It comes from a regression introduced during a past bug fix. Because of this flaw, Tomcat normalizes URLs before decoding them, which lets attackers craft requests that bypass access controls and reach restricted directories like /WEB-INF/ and /META-INF/. In deployments where HTTP PUT is enabled, an attacker could upload files through this path and potentially gain remote code execution (RCE).

On September 8, 2025, a sophisticated attacker compromised a prominent staking provider’s infrastructure and walked away with customer funds. The breach at Kiln was not prevented by audits, penetration tests, or SOC 2 compliance, all of which were in place. The attacker used state-actor-level techniques that evaded every security measure.

Key Takeaways Cloud misconfiguration is the silent epidemic destroying enterprise security. While organizations accelerate cloud adoption across cloud environments, Gartner analysis shows that through 2025, 99% of cloud security failures have been the customer’s fault, primarily due to misconfigurations. For decision-makers, this represents a critical business risk that demands immediate strategic attention.