The cloud gray zone—secret agents installed by cloud service providers

The report warns that cloud providers often silently install middleware agents on customer VMs, increasing attack surface and creating risk when those agents contain vulnerabilities; it uses the OMIGOD (Azure OMI) RCE vulnerabilities—initially installed without customer awareness and seen exploited in the wild—as a case study, argues the problem is broader across cloud providers, and launches a community GitHub dataset to map and track cloud-installed agents so customers can assess and mitigate the risks.