New open source database details the software that cloud service providers typically silently install on enterprises' virtual machines — often unbeknownst to customers.

If cloud services weren't complicated enough for the typical business today to properly configure and secure, there's also a lesser-known layer of middleware that cloud providers run that can harbor hidden security flaws.