Top

Category: Cloud security


Cloud security, Security

Russia-linked APT29 switched to targeting cloud services

February 27, 2024

Via: Security Affairs

A joint advisory issued by cybersecurity agencies of Five Eyes (US, UK, Australia, Canada and New Zealand) warns that Russia-linked APT29 threat actors (aka SVR group, Cozy Bear, Nobelium, BlueBravo, Midnight Blizzard, and The Dukes) have switched to targeting cloud […]


Cloud security, Security

Harness the power of security automation

February 21, 2024

Via: The Register

The complexity facing businesses as they make the necessary transition to cloud-native applications and multi-cloud architectures keeps cloud teams firmly on the frontline when it comes to implementing security policies. The constant risks of misconfiguration and malicious attack demand that […]


Cloud security, Security

Enter the era of platform-based cloud security

January 18, 2024

Via: The Register

Reports suggest that forward-looking organisations are ditching legacy point-based cloud security offerings and replacing them with more efficient integrated platforms which slash management overheads while significantly improving the app security. Cybersecurity Insiders notes that, in the past, companies have typically […]


Cloud security, Security

Google Cloud says it has fixed a significant security flaw

December 29, 2023

Via: TechRadar

Google Cloud has patched a vulnerability that may have allowed malicious actors with access to a Kubernetes cluster to elevate their privileges and wreak havoc. “An attacker who has compromised the Fluent Bit logging container could combine that access with […]


Cloud security, Security

Learning the safety language of the cloud

December 13, 2023

Via: The Register

In China, clouds are a symbol of luck. See multiple layering of clouds in a blue sky can mean you are in line to receive eternal happiness. If only that was true in the complex world of IT, where multi-cloud […]


Cloud security, Security

Read the clouds, reduce the cyber risk

December 11, 2023

Via: The Register

In the natural world, there are ten different kinds of cloud – a rare simplicity in meteorological terms. But in our global business environment, there’s no single defining feature to aid classification. Multi-cloud environments in particular spawn a lot of […]


Cloud security, Security

Australia building ‘top secret’ cloud to catch up and link with US, UK intel orgs

December 7, 2023

Via: The Register

Australia is building a top-secret cloud to host intelligence data and share it with the US and UK, which have their own clouds built for the same purpose. The three clouds were discussed on Monday by Andrew Shearer, Australia’s director-general […]


Cloud security, Security

Oracle Enables MFA by Default on Oracle Cloud

November 3, 2023

Via: Dark Reading

Oracle now requires multifactor authentication on all instances within its cloud environment, Oracle Cloud Infrastructure. Every new tenancy is created with MFA enabled by default for cloud administrators, Oracle said. The company also “seeded” all preexisting systems to have a […]


Cloud security, Security

Considerations for Managing Digital Sovereignty: The Executive Perspective

November 3, 2023

Via: Dark Reading

Businesses value the availability, scalability, and reliability of the cloud. They recognize that cloud computing can enable data to flow freely to where it needs to be accessed and processed, providing a huge advantage for organizations that operate on a […]


Cloud security, Security

Many SMBs aren’t seeing security as a priority, for some reason

October 26, 2023

Via: TechRadar

For a third of small and medium-sized businesses (SMBs) thinking about migrating their infrastructure to the cloud, security is not a strategic priority, new research has claimed. A new Amazon Web Services report surveying more than 800 C-suite executives, vice […]


Cloud security, Security

Helping you bridge the cloud security gap

October 24, 2023

Via: The Register

The job of the cyber security professional is never easy, and it gets progressively harder with the movement of sensitive data and applications across the multiple different on and off premise systems that make up modern hybrid cloud environments. That’s […]


Cloud security, Security

Microsoft unveils the next generation of OneDrive – and it might actually make you like using cloud storage

October 4, 2023

Via: TechRadar

Microsoft has officially unveiled the next generation of OneDrive, which is set to bring the cloud storage solution more closely in line with the rest of the company’s offerings, including Microsoft 365 apps like Teams and Outlook. The company is […]


Cloud security, Security

Cloud changes are to blame for nearly all cyber-attacks

September 18, 2023

Via: TechRadar

Of all the vulnerabilities an organization’s system has, the majority sit within its cloud environment, a new report from cybersecurity researchers Unit 42, part of Palo Alto Networks, has found. As per the report, four in five (80%) of all […]


Cloud security, Security

Lacework expands partnership with Snowflake to drive secure cloud growth

September 14, 2023

Via: Help Net Security

Lacework and Snowflake announced an expanded partnership that advances the future of cloud infrastructure and further automates cloud security at scale. The extended partnership empowers security teams with direct access to their Lacework cloud security data through Snowflake’s secure data […]


Cloud security, Security

Cisco Secure Application provides business risk insights for cloud native apps

September 13, 2023

Via: Help Net Security

Cisco has unveiled Cisco Secure Application (previously Security Insights for Cloud Native Application Observability) on the Cisco Full-Stack Observability Platform, enabling organizations to bring together application and security teams to securely develop and deploy applications. The latest release of Cisco […]


Cloud security, Security

Netskope joins MXDR by Deloitte to expand strategic alliance

September 12, 2023

Via: Help Net Security

Netskope has unveiled that its existing strategic alliance with Deloitte has expanded with the addition of Netskope to the Managed Extended Detection and Response (MXDR) by Deloitte platform. The new Netskope module on MXDR by Deloitte will include advanced cloud […]


Cloud security, Security

Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining

August 9, 2023

Via: The Hacker News

Exposed Kubernetes (K8s) clusters are being exploited by malicious actors to deploy cryptocurrency miners and other backdoors. Cloud security firm Aqua, in a report shared with The Hacker News, said a majority of the clusters belonged to small to medium-sized […]


Cloud security, Security

Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access Trojan

August 2, 2023

Via: The Hacker News

Cybersecurity researchers have discovered a new post-exploitation technique in Amazon Web Services (AWS) that allows the AWS Systems Manager Agent (SSM Agent) to be run as a remote access trojan on Windows and Linux environments “The SSM agent, a legitimate […]


Cloud security, Security

The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left

July 27, 2023

Via: The Hacker News

As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even thousands of technologies that make up the patchwork quilt of development and cloud environments, security […]


Cloud security, Security

Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation

July 19, 2023

Via: The Hacker News

Cybersecurity researchers have uncovered a privilege escalation vulnerability in Google Cloud that could enable malicious actors tamper with application images and infect users, leading to supply chain attacks. The issue, dubbed Bad.Build, is rooted in the Google Cloud Build service, […]