2025 cloud security roundup: How attackers abused identities, supply chains, and AI

The Datadog team discovered a malicious actor attempting to contribute harmful code to their open-source repositories via a seemingly legitimate pull request. They detail how the attacker tried to inject code that would steal credentials from users of their agents, but were caught by a combination of automated checks, vigilant community members, and careful code review. This incident highlights the growing need for robust security practices in open-source projects to defend against increasingly sophisticated AI-assisted attacks.