Cloud Platform Integrity, DevSecOps & Vulnerability Exposure Debt

Cloud and software-delivery risk spans third-party identities, authorization, CI/CD integrity, supply chains, secrets, and evidence provenance. A TiDB/PingCAP breach report says service-account credentials enabled access and sensitive vendor-held records may be exposed, while broader attacker claims and customer impact remain unverified. New cloud-data-protection guidance reiterates immutable, isolated backups and tested recovery, but is vendor-promotional and adds limited operational evidence.