Cloud - Security Ticks

Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud

Application Security, Cloud, cloud security, Salesforce, Vulnerabilities / SecurityTicks

Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud 2025-06-10 at 15:03 By Kevin Townsend Security researchers uncover critical flaws and widespread misconfigurations in Salesforce’s industry-specific CRM solutions. The post Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to […]

React to this headline:

Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud Read More »

Cloud and AI drive efficiency, but open doors for attackers

Artificial Intelligence, Cloud, cloud security, News, Orca Security, report, survey, threat / SecurityTicks

Cloud and AI drive efficiency, but open doors for attackers 2025-06-10 at 07:45 By Help Net Security AI adoption is increasing, with 84% of organizations now using AI in the cloud, according to Orca Security. But this innovation comes with new risks: 62% of organizations have at least one vulnerable AI package, and some of

React to this headline:

Cloud and AI drive efficiency, but open doors for attackers Read More »

Closing security gaps in multi-cloud and SaaS environments

Cloud, cloud security, collaboration, cybersecurity, Don't miss, Features, Hot stuff, News, Qualys, SaaS, strategy / SecurityTicks

Closing security gaps in multi-cloud and SaaS environments 2025-05-20 at 09:06 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, SVP, Product Management, GTM, and Growth at Qualys, discusses recent Qualys research on the state of cloud and SaaS security. He talks about how siloed visibility, fragmented tools, and a lack of incident

React to this headline:

Closing security gaps in multi-cloud and SaaS environments Read More »

Observability is security’s way back into the cloud conversation

Cloud, cloud adoption, cybersecurity, Don't miss, Features, Hot stuff, New Relic, News, opinion, strategy / SecurityTicks

Observability is security’s way back into the cloud conversation 2025-04-08 at 08:02 By Mirko Zorz In this Help Net Security interview, Esteban Gutierrez, CISO and VP of Information Security at New Relic, discusses how the adoption of cloud infrastructure is outpacing security readiness. He shares strategies for overcoming common misconfigurations and optimizing access controls in

React to this headline:

Observability is security’s way back into the cloud conversation Read More »

Cloud providers aren’t delivering on security promises

Arctic Wolf Networks, CISO, Cloud, cybersecurity, News, report, survey / SecurityTicks

Cloud providers aren’t delivering on security promises 2025-03-24 at 07:03 By Help Net Security Security concerns around cloud environments has prompted 44% of CISOs to change cloud service provider, according to Arctic Wolf. This is being driven by the fact that 24% don’t believe their cloud environment is secure, and 43% think cloud service providers

React to this headline:

Cloud providers aren’t delivering on security promises Read More »

Cloud security gains overshadowed by soaring storage fees

Cloud, cloud storage, News, report, Wasabi / SecurityTicks

Cloud security gains overshadowed by soaring storage fees 2025-03-07 at 17:01 By Help Net Security Storage fees in general (e.g., API calls, operations, data access) comprise 49% of an average user’s service bill, compared to the actual stored capacity, according to a study conducted by Vanson Bourne. Nearly all organizations globally have experienced data security-related

React to this headline:

Cloud security gains overshadowed by soaring storage fees Read More »

New AI Protection from Google Cloud Tackles AI Risks, Threats, and Compliance

AI, Artificial Intelligence, Cloud, cloud security, Google / SecurityTicks

New AI Protection from Google Cloud Tackles AI Risks, Threats, and Compliance 2025-03-07 at 13:31 By Kevin Townsend Google Cloud’s AI Protection helps discover AI inventory, secure AI assets, and manage threats with detect, investigate, and respond capabilities. The post New AI Protection from Google Cloud Tackles AI Risks, Threats, and Compliance appeared first on

React to this headline:

New AI Protection from Google Cloud Tackles AI Risks, Threats, and Compliance Read More »

Aryon Security Debuts With Platform to Prevent Cloud Misconfigurations

Cloud, cloud security, Funding/M&A / SecurityTicks

Aryon Security Debuts With Platform to Prevent Cloud Misconfigurations 2025-03-04 at 16:32 By Kevin Townsend Misconfigurations are the cause of most cloud breaches. Aryon is on a mission to prevent them. The post Aryon Security Debuts With Platform to Prevent Cloud Misconfigurations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Aryon Security Debuts With Platform to Prevent Cloud Misconfigurations Read More »

How CISOs can balance security and business agility in the cloud

access management, CISO, Cloud, cloud security, Cloudera, cybersecurity, Don't miss, Features, Hot stuff, News, opinion / SecurityTicks

How CISOs can balance security and business agility in the cloud 2025-02-17 at 08:03 By Mirko Zorz In this Help Net Security interview, Natalia Belaya, CISO at Cloudera, discusses common misconceptions about cloud security, the balance between protection and business agility, and overlooked risks that CISOs should prioritize. Belaya also offers practical strategies for integrating

React to this headline:

How CISOs can balance security and business agility in the cloud Read More »

Stratoshark: Wireshark for the cloud – now available!

Cloud, Don't miss, News, open source, penetration testing, software, Sysdig, wireless, Wireshark / SecurityTicks

Stratoshark: Wireshark for the cloud – now available! 2025-01-22 at 20:33 By Help Net Security Stratoshark is an innovative open-source tool that brings Wireshark’s detailed network visibility to the cloud, providing users with a standardized approach to cloud observability. Stratoshark incorporates much of Wireshark’s codebase, including its user interface elements. The interface and workflows will

React to this headline:

Stratoshark: Wireshark for the cloud – now available! Read More »

Machine identities are the next big target for attackers

Cloud, cyber risk, cybercrime, identity, News, report, survey, Venafi / SecurityTicks

Machine identities are the next big target for attackers 2024-12-30 at 06:34 By Help Net Security 86% of organizations had a security incident related to their cloud native environment within the last year, according to Venafi. As a result, 53% of organizations had to delay an application launch or slow down production time; 45% suffered

React to this headline:

Machine identities are the next big target for attackers Read More »

Who handles what? Common misconceptions about SaaS security responsibilities

Cloud, cybersecurity, Don't miss, Features, Guidewire, Hot stuff, identity management, Incident Response, News, opinion, SaaS / SecurityTicks

Who handles what? Common misconceptions about SaaS security responsibilities 2024-12-09 at 07:33 By Mirko Zorz In this Help Net Security interview, James Dolph, CISO at Guidewire, addresses common misconceptions about security responsibilities in cloud environments, particularly in SaaS, and how these misunderstandings can lead to security risks. What common misconceptions do you encounter about the

React to this headline:

Who handles what? Common misconceptions about SaaS security responsibilities Read More »

Preparing for Q-day: The essential role of cloud migration in securing enterprise data

Cloud, cybersecurity, data security, Don't miss, Encryption, Expert analysis, Expert corner, Hot stuff, Lemongrass, News, opinion, quantum computing / SecurityTicks

Preparing for Q-day: The essential role of cloud migration in securing enterprise data 2024-12-05 at 07:34 By Help Net Security As the era of quantum computing draws closer, businesses face a new and unprecedented threat to data security: “Q-day.” This looming turning point—when quantum machines can break traditional encryption with ease—has the potential to upend

React to this headline:

Preparing for Q-day: The essential role of cloud migration in securing enterprise data Read More »

Modernizing incident response in the AI era

Artificial Intelligence, Bill, Cloud, cybersecurity, Don't miss, Hot stuff, Incident Response, Video / SecurityTicks

Modernizing incident response in the AI era 2024-11-29 at 06:32 By Help Net Security In this Help Net Security video, Gourav Nagar, Director of Information Security at Bill, discusses modernizing incident response in the era of AI and the cloud: Why this issue is important for organizations looking to stay ahead of rapidly evolving cyber

React to this headline:

Modernizing incident response in the AI era Read More »

Windows 365 Link: Connect securely to Windows 365

Cloud, hardware, Microsoft, News / SecurityTicks

Windows 365 Link: Connect securely to Windows 365 2024-11-19 at 18:55 By Mirko Zorz Microsoft unveiled Windows 365 Link, their first purpose-built Cloud PC device for instant, secure connection to Windows 365. Sign-in screen with USB security key option (Source: Microsoft) Windows 365 Link prioritizes security “We have heard concerns from IT pros about the

React to this headline:

Windows 365 Link: Connect securely to Windows 365 Read More »

Maximizing security visibility on a budget

Artificial Intelligence, Cloud, Compliance, cybersecurity, Don't miss, Features, Forescout, Hot stuff, IoT, IT assets, network, News, opinion, security controls, zero trust / SecurityTicks

Maximizing security visibility on a budget 2024-11-05 at 07:03 By Mirko Zorz In this Help Net Security interview, Barry Mainz, CEO at Forescout, discusses the obstacles organizations encounter in attaining security visibility, particularly within cloud and hybrid environments. He explains why asset intelligence—going beyond basic visibility to understand device behavior and risk—is essential. Mainz also

React to this headline:

Maximizing security visibility on a budget Read More »

Cracking the Cloud: The Persistent Threat of Credential-Based Attacks

Cloud, cloud security, credentials, Identity & Access / SecurityTicks

Cracking the Cloud: The Persistent Threat of Credential-Based Attacks 2024-10-01 at 16:01 By Kevin Townsend Credentials are still the most common entry point for bad actors, even as businesses deploy multi-factor authentication (MFA) to strengthen defenses. The post Cracking the Cloud: The Persistent Threat of Credential-Based Attacks appeared first on SecurityWeek. This article is an

React to this headline:

Cracking the Cloud: The Persistent Threat of Credential-Based Attacks Read More »

Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts

account hijacking, Cloud, credentials, Don't miss, Hot stuff, Microsoft, Microsoft Entra ID, News, privileged accounts, Ransomware / SecurityTicks

Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts 2024-09-30 at 17:01 By Zeljka Zorz Storm-0501, an affiliate of several high-profile ransomware-as-a-service outfits, has been spotted compromising targets’ cloud environments and on-premises systems. “Storm-0501 is the latest threat actor observed to exploit weak credentials and over-privileged accounts to move from organizations’

React to this headline:

Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts Read More »

Microsoft: Cloud Environments of US Organizations Targeted in Ransomware Attacks

Cloud, cloud security, Embargo, Ransomware / SecurityTicks

Microsoft: Cloud Environments of US Organizations Targeted in Ransomware Attacks 2024-09-30 at 15:06 By Ionut Arghire A threat actor has been compromising the hybrid cloud environments of US organizations in multiple sectors. The post Microsoft: Cloud Environments of US Organizations Targeted in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Microsoft: Cloud Environments of US Organizations Targeted in Ransomware Attacks Read More »

Nextcloud Hub 9 released: New features, more security, updated performance

Cloud, cloud computing, News, open source / SecurityTicks

Nextcloud Hub 9 released: New features, more security, updated performance 2024-09-20 at 06:01 By Help Net Security Nextcloud has launched Nextcloud Hub 9, a significant update to its open-source cloud-based collaboration platform. It introduces several new features to improve user experience, performance, and security. Enhanced security in Nextcloud Hub 9 Nextcloud Hub 9 lets you

React to this headline:

Nextcloud Hub 9 released: New features, more security, updated performance Read More »