Blog

News and updates about the platform

Cover Image for 'Exposed' is a guess. 'Reachable' is a fact.

'Exposed' is a guess. 'Reachable' is a fact.

Every CSPM infers exposure from your configuration and hands you a wall of 'internet-facing criticals.' Most of them answer nobody. VikingCloud checks each entry point from the outside after every sca...

Cover Image for Cloud security, on the terms we promised

Cloud security, on the terms we promised

VikingCloud was built around four lines we committed to publicly before we had a single user. Plug and play, plain language, every feature in every tier, minimal footprint. Here is how each of them su...

Cover Image for A 30-hour pentest expires the day after it ships

A 30-hour pentest expires the day after it ships

A web application pentest takes three days. The next one is in six months. Between them, your dependencies, IAM, and supply chain keep moving — and nobody is watching the way the pentester was. That g...

Cover Image for Three Linux 0-Days in Three Weeks. Did Your Briefing Catch All Three?

Three Linux 0-Days in Three Weeks. Did Your Briefing Catch All Three?

Most AI-driven security tools handle the obvious critical CVEs fine. The category quietly fails at the edges, on the items that look almost identical to the ones it caught. Silence is the worst verdic...

Cover Image for Dirty Frag Dropped. We Knew Our Exposure In Seconds.

Dirty Frag Dropped. We Knew Our Exposure In Seconds.

Two new Linux kernel root exploits — CVE-2026-43284 and CVE-2026-43500, chained into a single 'Dirty Frag' primitive — went public on May 7, 2026. Patches are rolling out. The real engineering cost is...

Cover Image for Copy Fail: 732 Bytes to Root, Half a Day to Find

Copy Fail: 732 Bytes to Root, Half a Day to Find

The Linux 'Copy Fail' kernel exploit (CVE-2026-31431) is 732 bytes of Python. The hard part isn't patching it -- it's the half-day inventory hunt to figure out which of your VMs, container hosts, and ...

Cover Image for The Supply Chain Clock Starts When the CVE Drops. How Long Until You Can Answer 'Are We Affected?'

The Supply Chain Clock Starts When the CVE Drops. How Long Until You Can Answer 'Are We Affected?'

March 2026 made one thing clear: supply chain compromises are frequent, well-resourced, and not stoppable from the outside. The real engineering cost is the hours your team spends chasing down whether...

Cover Image for How Viking Agents Turn Hundreds of Alerts Into a Handful of Actionable Issues

How Viking Agents Turn Hundreds of Alerts Into a Handful of Actionable Issues

Every cloud security tool floods teams with raw findings. VikingCloud's AI agents correlate checks, vulnerabilities, permissions, and attack paths to surface only what matters.

Cover Image for Attack Path Analysis: How VikingCloud Traces Routes to Your Crown Jewels

Attack Path Analysis: How VikingCloud Traces Routes to Your Crown Jewels

Knowing what is misconfigured is not enough. VikingCloud traces how an attacker could chain misconfigurations, vulnerabilities, and IAM permissions to reach your most critical assets.

Cover Image for Compliance Assessment in Minutes, Not Months

Compliance Assessment in Minutes, Not Months

Traditional compliance takes weeks of manual work and tens of thousands of dollars. VikingCloud assesses your infrastructure against major frameworks automatically and delivers evidence-backed results...