Cortex Cloud Security Research

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

This blog dives into the growing trend of data theft and extortion activities which no longer require the use of ransomware to pressure victims into paying a demand. We examine the financially-motivated threat actors using both single and double extortion techniques and what this means for organizations going forward, especially with the arrival of frontier AI models.

Jun 09, 2026