AWS - Security Ticks

Prowler: Open-source security tool for AWS, Google Cloud Platform, Azure

AWS, cybersecurity, database security, Don't miss, GitHub, Hot stuff, News, open source, software / SecurityTicks

Prowler: Open-source security tool for AWS, Google Cloud Platform, Azure 2024-02-07 at 07:31 By Mirko Zorz Prowler is an open-source security tool designed to assess, audit, and enhance the security of AWS, GCP, and Azure. It’s also equipped for incident response, continuous monitoring, hardening, and forensics preparation. Details The tool includes hundreds of controls that […]

React to this headline:

Prowler: Open-source security tool for AWS, Google Cloud Platform, Azure Read More »

Researchers discover exposed API secrets, impacting major tech tokens

API security, AWS, cybersecurity, Data leak, Escape, GitHub, News, Slack, Stripe / SecurityTicks

Researchers discover exposed API secrets, impacting major tech tokens 2024-02-05 at 07:33 By Help Net Security Escape’s security research team scanned 189.5 million URLs and found more than 18,000 exposed API secrets. 41% of exposed secrets were highly critical, i.e. could lead to financial risks for the organizations. Exposed API secrets The exposed secrets include

React to this headline:

Researchers discover exposed API secrets, impacting major tech tokens Read More »

CloudFoxable: Open-source AWS penetration testing playground

AWS, Bishop Fox, cybersecurity, News, penetration testing, research, skill development, software / SecurityTicks

CloudFoxable: Open-source AWS penetration testing playground 2024-01-22 at 07:02 By Mirko Zorz CloudFoxable is a capture-the-flag (CTF) style learning platform you can deploy to your playground AWS account. It primarily targets current penetration testers seeking to learn exploitation of cloud-native attack paths, and cloud security experts aiming to practice offensive security techniques safely. “What makes

React to this headline:

CloudFoxable: Open-source AWS penetration testing playground Read More »

Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services

AWS, cybercrime, Fbot, Fraud & Identity Theft, PayPal, SentinelLabs / SecurityTicks

Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services 2024-01-11 at 23:01 By Ryan Naraine The tool, called FBot, is capable of credential harvesting for spamming attacks, and AWS, PayPal and SaaS account hijacking. The post Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services Read More »

5 free generative AI courses you can take right now

AWS, Don't miss, generative AI, Google, Ingram Micro, News, skill development / SecurityTicks

5 free generative AI courses you can take right now 2023-12-27 at 07:01 By Help Net Security Generative AI (GenAI) is a form of artificial intelligence technology focused on generating new content. This can include text, images, audio, and other media types. It’s a rapidly evolving field with significant implications in various industries, technology, and

React to this headline:

5 free generative AI courses you can take right now Read More »

1Kosmos partners with AWS to offer MFA for customer use cases

1Kosmos, Amazon, AWS, Industry news / SecurityTicks

1Kosmos partners with AWS to offer MFA for customer use cases 07/12/2023 at 14:31 By Industry News 1Kosmos announced it has completed the integration of its 1Kosmos BlockID platform with Amazon Cognito. As an AWS Advanced Technology Partner, 1Kosmos enables Amazon customers to seamlessly add passwordless multi-factor authentication (MFA) to their customer-facing web and mobile

React to this headline:

1Kosmos partners with AWS to offer MFA for customer use cases Read More »

Business metrics for Cisco Cloud Observability capability enables customers to protect revenue

AWS, Cisco, Industry news / SecurityTicks

Business metrics for Cisco Cloud Observability capability enables customers to protect revenue 29/11/2023 at 15:02 By Industry News Cisco announced new business metrics in Cisco Cloud Observability. Powered by the Cisco Observability Platform to enhance business context for modern applications running on AWS. This latest release also supports integration with AWS services and application performance

React to this headline:

Business metrics for Cisco Cloud Observability capability enables customers to protect revenue Read More »

Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets

access, AWS, Cloud, cloud security, IAM, Identity & Access / SecurityTicks

Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets 28/11/2023 at 17:17 By Eduard Kovacs AWS announces Amazon One Enterprise, a palm-based identity service that enables users to easily access physical locations and digital assets. The post Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets appeared first on SecurityWeek. This

React to this headline:

Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets Read More »

Sumo Logic accelerates troubleshooting and security across AWS environments

AWS, Industry news, Sumo Logic / SecurityTicks

Sumo Logic accelerates troubleshooting and security across AWS environments 28/11/2023 at 17:01 By Industry News Sumo Logic announced a number of new innovations and updates that help users accelerate troubleshooting and security across AWS environments, within a span of minutes and a few clicks. Digital transformation and cloud initiatives are creating complexity for organizations, with

React to this headline:

Sumo Logic accelerates troubleshooting and security across AWS environments Read More »

IBM partners with AWS to optimize data management for AI workloads

AWS, IBM, Industry news / SecurityTicks

IBM partners with AWS to optimize data management for AI workloads 28/11/2023 at 15:01 By Industry News IBM announced that it has been working with AWS on the general availability of Amazon Relational Database Service (Amazon RDS) for Db2, a fully managed cloud offering designed to make it easier for database customers to manage data

React to this headline:

IBM partners with AWS to optimize data management for AI workloads Read More »

Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets

AWS, Industry news / SecurityTicks

Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets 28/11/2023 at 10:31 By Industry News AWS announced Amazon One Enterprise, a palm-based identity service for comprehensive and easy-to-use authentication that improves organizational security and helps prevent costly security breaches. The new service enables organizations to provide a fast, convenient, and contactless

React to this headline:

Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets Read More »

Trellix accelerates threat detection and response with GenAI capabilities

AWS, Industry news, Trellix / SecurityTicks

Trellix accelerates threat detection and response with GenAI capabilities 27/11/2023 at 15:01 By Industry News Trellix announced its generative artificial intelligence (GenAI) capabilities, built on Amazon Bedrock and supported by Trellix Advanced Research Center. Amazon Bedrock is a fully managed service from AWS making foundation models (FMs) from leading AI companies accessible via an API

React to this headline:

Trellix accelerates threat detection and response with GenAI capabilities Read More »

AWS Kill Switch: Open-source incident response tool

AWS, GitHub, Incident Response, News, open source, software / SecurityTicks

AWS Kill Switch: Open-source incident response tool 27/11/2023 at 09:01 By Mirko Zorz AWS Kill Switch is an open-source incident response tool for quickly locking down AWS accounts and IAM roles during a security incident. The solution includes a Lambda function and proof of concept client. You can either adopt this client or build your

React to this headline:

AWS Kill Switch: Open-source incident response tool Read More »

8 free AI and GenAI courses from AWS

Artificial Intelligence, AWS, generative AI, Industry news, News, skill development / SecurityTicks

8 free AI and GenAI courses from AWS 21/11/2023 at 14:02 By Industry News Amazon’s AI Ready initiative aims to provide free AI skills training and education to 2 million people globally by 2025. “Artificial intelligence is the most transformative technology of our generation. If we are going to unlock the full potential of AI

React to this headline:

8 free AI and GenAI courses from AWS Read More »

10 corporate cybersecurity blogs worth your time

Akamai, AT&T Cybersecurity, AWS, Cloudflare, cybersecurity, Don't miss, Dropbox, ESET, GitHub, Google Cloud, Hot stuff, IBM, Intel, Mandiant, News, Sophos / SecurityTicks

10 corporate cybersecurity blogs worth your time 14/11/2023 at 09:02 By Help Net Security In this article, we’ve curated a list of insightful corporate cybersecurity blogs that provide analysis and actionable advice to help you keep your company’s digital assets secure. This list is not meant to be exhaustive since thousands of companies have infosec

React to this headline:

10 corporate cybersecurity blogs worth your time Read More »

Sumo Logic discloses potential breach via compromised AWS credential

AWS, credentials, data breach, Don't miss, Hot stuff, News, Sumo Logic / SecurityTicks

Sumo Logic discloses potential breach via compromised AWS credential 08/11/2023 at 14:49 By Helga Labus Cloud-native big data and security analytics firm Sumo Logic is investigating a potential security incident within their platform, the company revealed on Tuesday. The Sumo Logic incident “On Friday, November 3rd, 2023, Sumo Logic discovered evidence of a potential security

React to this headline:

Sumo Logic discloses potential breach via compromised AWS credential Read More »

AWS European Sovereign Cloud allows customers to keep all metadata in the EU

Amazon, AWS, EU, Europe, Industry news, regulation / SecurityTicks

AWS European Sovereign Cloud allows customers to keep all metadata in the EU 25/10/2023 at 11:16 By Industry News AWS announced it will launch the AWS European Sovereign Cloud, a new, independent cloud for Europe designed to help public sector customers and those in highly regulated industries meet the most stringent regulatory data residency and

React to this headline:

AWS European Sovereign Cloud allows customers to keep all metadata in the EU Read More »

Jupyter Notebooks targeted by cryptojackers

AWS, Cado Security, Cloud, cryptojacking, Don't miss, Google Cloud, Hot stuff, Malware, News / SecurityTicks

Jupyter Notebooks targeted by cryptojackers 18/10/2023 at 14:36 By Helga Labus Cryptojackers are targeting exposed Jupyter Notebooks to install cryptominers and steal credential files for popular cloud services, researchers have uncovered. What are Jupyter Notebooks? “Jupyter is a service that allows you to host individual snippets of code and lets others execute this code in

React to this headline:

Jupyter Notebooks targeted by cryptojackers Read More »

Immutable links with AWS in latest Web3 gaming push

Amazon, AWS, Gaming, immutable, Web3 / SecurityTicks

Immutable links with AWS in latest Web3 gaming push 11/10/2023 at 08:02 By Cointelegraph By Martin Young The blockchain gaming firm said it will gain access to a vast pipeline of game studio leads and support for successful deal closures. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Immutable links with AWS in latest Web3 gaming push Read More »

Dangerous vulnerability can be exploited to carry out massive DDoS attacks (CVE-2023-44487)

attack, attacks, AWS, Cloudflare, CVE, cybersecurity, DDoS, Google, News, threat, vulnerability / SecurityTicks

Dangerous vulnerability can be exploited to carry out massive DDoS attacks (CVE-2023-44487) 10/10/2023 at 16:21 By Help Net Security Cloudflare, Google, and Amazon AWS revealed that a zero-day vulnerability in the HTTP/2 protocol has been used to mount massive, high-volume DDoS attacks, which they dubbed HTTP/2 Rapid Reset. Decoding HTTP/2 Rapid Reset (CVE-2023-44487) In late

React to this headline:

Dangerous vulnerability can be exploited to carry out massive DDoS attacks (CVE-2023-44487) Read More »