cloud security - Security Ticks

Cisco Shopping Spree Adds Oort ID Threat Detection Tech

Acquisition, Cisco, cloud security, Funding/M&A, ITDR, M&A Tracker, Oort / SecurityTicks

Cisco Shopping Spree Adds Oort ID Threat Detection Tech 13/07/2023 at 19:31 By Ryan Naraine The planned Oort purchase is Cisco’s fourth acquisition of a cybersecurity company in the first half of 2023. The post Cisco Shopping Spree Adds Oort ID Threat Detection Tech appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

React to this headline:

Cisco Shopping Spree Adds Oort ID Threat Detection Tech Read More »

Only 45% of cloud data is currently encrypted

Cloud, cloud security, cybersecurity, data, data breach, Don't miss, News, Thales / SecurityTicks

Only 45% of cloud data is currently encrypted 13/07/2023 at 06:01 By Help Net Security 39% of businesses have experienced a data breach in their cloud environment last year, an increase on the 35% reported in 2022, according to Thales. In addition, human error was reported as the leading cause of cloud data breaches by

React to this headline:

Only 45% of cloud data is currently encrypted Read More »

Orca Sues Wiz Over Alleged Cloud Security Patent Violations

cloud security, Featured, Funding/M&A, Orca Security, patent infringement, Wiz / SecurityTicks

Orca Sues Wiz Over Alleged Cloud Security Patent Violations 12/07/2023 at 23:18 By Ryan Naraine Orca Security sues its main rival, claiming patent infringements, intellectual property theft and even marketing copycat behavior. The post Orca Sues Wiz Over Alleged Cloud Security Patent Violations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Orca Sues Wiz Over Alleged Cloud Security Patent Violations Read More »

Chinese hackers forged authentication tokens to breach government emails

cloud security, cyber espionage, data theft, Don't miss, Europe, Government, Hot stuff, Microsoft, News, Outlook, USA, vulnerability / SecurityTicks

Chinese hackers forged authentication tokens to breach government emails 12/07/2023 at 13:17 By Zeljka Zorz Sophisticated hackers have accessed email accounts of organizations and government agencies via authentication tokens they forged by using an acquired Microsoft account (MSA) consumer signing key, the company has revealed on Tuesday. “The threat actor Microsoft links to this incident

React to this headline:

Chinese hackers forged authentication tokens to breach government emails Read More »

Now’s the Time for a Pragmatic Approach to New Technology Adoption

Artificial Intelligence, cloud security / SecurityTicks

Now’s the Time for a Pragmatic Approach to New Technology Adoption 06/07/2023 at 21:32 By Marc Solomon What a cloud migration strategy did for cloud adoption, an automation implementation strategy does for security automation adoption. The post Now’s the Time for a Pragmatic Approach to New Technology Adoption appeared first on SecurityWeek. This article is

React to this headline:

Now’s the Time for a Pragmatic Approach to New Technology Adoption Read More »

Cloud security: Sometimes the risks may outweigh the rewards

Akamai, Cloud, cloud computing, cloud security, cybersecurity, Don't miss, Expert analysis, Hot stuff, News, opinion, vulnerability / SecurityTicks

Cloud security: Sometimes the risks may outweigh the rewards 03/07/2023 at 07:32 By Help Net Security Threat actors are well-aware of the vulnerability of our cloud infrastructure. The internet we have today is not equipped to serve the data needs of the future. When data is stored in the cloud, it can end up across

React to this headline:

Cloud security: Sometimes the risks may outweigh the rewards Read More »

One third of security breaches go unnoticed by security professionals

cloud security, cybersecurity, Flexera, Forrester Research, Gigamon, hybrid cloud, News, report / SecurityTicks

One third of security breaches go unnoticed by security professionals 03/07/2023 at 06:32 By Help Net Security While surface-level confidence around hybrid cloud security is high, with 94% of global respondents stating their security tools and processes provide them with complete visibility and insights into their IT infrastructure, the reality is nearly one third of

React to this headline:

One third of security breaches go unnoticed by security professionals Read More »

Data Security Firm Cyera Attracts $100M Investment

Accel, cloud security, Cyera, Data Protection, Funding/M&A, Sequioa / SecurityTicks

Data Security Firm Cyera Attracts $100M Investment 27/06/2023 at 20:12 By Ryan Naraine Cyera closes a massive $100 million round as investors continue to pour cash into the data security posture management (DSPM) space. The post Data Security Firm Cyera Attracts $100M Investment appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Data Security Firm Cyera Attracts $100M Investment Read More »

95% fear inadequate cloud security detection and response

Cloud, cloud security, data breach, identity, News, Permiso, report / SecurityTicks

95% fear inadequate cloud security detection and response 27/06/2023 at 06:37 By Help Net Security Although numerous respondents acknowledged employing risky practices and behaviors within their cloud environments, they strongly believe in the effectiveness of their security tools and processes to safeguard their organizations against meticulously planned attacks, according to Permiso. That high confidence level

React to this headline:

95% fear inadequate cloud security detection and response Read More »

Uncovering attacker tactics through cloud honeypots

attacks, Cloud, cloud security, Don't miss, honeypots, News, Orca Security, report / SecurityTicks

Uncovering attacker tactics through cloud honeypots 26/06/2023 at 06:12 By Help Net Security Attackers typically find exposed “secrets” – pieces of sensitive information that allow access to an enterprise cloud environment — in as little as two minutes and, in many cases, begin exploiting them almost instantly, highlighting the urgent need for comprehensive cloud security,

React to this headline:

Uncovering attacker tactics through cloud honeypots Read More »

Operationalizing zero trust in the cloud

Cloud, cloud security, cybersecurity, Don't miss, Expert analysis, Expert corner, Gigamon, Hot stuff, opinion, zero trust / SecurityTicks

Operationalizing zero trust in the cloud 23/06/2023 at 07:39 By Help Net Security Some organizations have bought into the idea that workloads in the cloud are inherently more secure than those on premises. This idea is reinforced by the concept that the cloud service provider (CSP) assumes responsibility for security. However, while a secure cloud

React to this headline:

Operationalizing zero trust in the cloud Read More »

US and European IT decision-makers have different cloud security priorities

automation, cloud adoption, cloud security, News, report, SUSE / SecurityTicks

US and European IT decision-makers have different cloud security priorities 21/06/2023 at 07:40 By Help Net Security The growing adoption of cloud has elevated cloud security fear for IT teams, as they grapple with the challenges and concerns arising from the widespread use of complex cloud environments while diligently addressing them, according to SUSE. Cloud

React to this headline:

US and European IT decision-makers have different cloud security priorities Read More »

Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps

Azure, cloud security, Microsoft, noAuth, OAuth, Vulnerabilities / SecurityTicks

Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps 20/06/2023 at 23:24 By Ryan Naraine Businesses using ‘Log in with Microsoft’ could be exposed to privilege escalation and full account takeover exploits. The post Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps appeared first on SecurityWeek. This article is an

React to this headline:

Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps Read More »

XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions

cloud security / SecurityTicks

XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions 15/06/2023 at 18:28 By Ionut Arghire Microsoft addressed two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) leading to unauthorized access to user sessions. The post XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions appeared first on

React to this headline:

XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions Read More »

Incorporating cloud security teams into the SOC enhances operational efficiencies

CIO, CISO, cloud security, News, report, SOC, Trend Micro, XDR / SecurityTicks

Incorporating cloud security teams into the SOC enhances operational efficiencies 13/06/2023 at 06:02 By Help Net Security Security leaders are recognizing that cloud and the way cloud security teams work today are becoming increasingly critical to business and IT operations, according to Trend Micro. As a result, cloud security and the foundational practices of their

React to this headline:

Incorporating cloud security teams into the SOC enhances operational efficiencies Read More »

Google Cloud Now Offering $1 Million Cryptomining Protection

cloud security, Cryptocurrency, cryptomining, Google, Google Cloud / SecurityTicks

Google Cloud Now Offering $1 Million Cryptomining Protection 09/06/2023 at 14:01 By Ionut Arghire Google Cloud is offering up to $1 million in financial protection to cover expenses associated with undetected cryptomining attacks. The post Google Cloud Now Offering $1 Million Cryptomining Protection appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Google Cloud Now Offering $1 Million Cryptomining Protection Read More »

Sysdig Introduces CNAPP With Realtime CDR

cloud security, CNAPP, Sysdig / SecurityTicks

Sysdig Introduces CNAPP With Realtime CDR 07/06/2023 at 23:46 By Kevin Townsend Sysdig is launching what it claims to be the first CNAPP with end-to-end detection and response, consolidating CNAPP and CDR. The post Sysdig Introduces CNAPP With Realtime CDR appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Sysdig Introduces CNAPP With Realtime CDR Read More »

Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information

cloud security, Data Protection, Salesforce / SecurityTicks

Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information 01/06/2023 at 13:47 By Eduard Kovacs Salesforce ghost sites — domains that are no longer maintained but still accessible — can expose personal information and business data. The post Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information appeared first on SecurityWeek. This article is an

React to this headline:

Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information Read More »

Google Cloud Users Can Now Automate TLS Certificate Lifecycle

certificate, cloud security, Google, TLS / SecurityTicks

Google Cloud Users Can Now Automate TLS Certificate Lifecycle 26/05/2023 at 14:10 By Ionut Arghire Google makes ACME API available to all Google Cloud users to allow them to automatically acquire and renew TLS certificates for free. The post Google Cloud Users Can Now Automate TLS Certificate Lifecycle appeared first on SecurityWeek. This article is

React to this headline:

Google Cloud Users Can Now Automate TLS Certificate Lifecycle Read More »

CISO-level tips for securing corporate data in the cloud

cloud security, cybersecurity, data security, Don't miss, Hot stuff, SaaS, strategy, tips, Video / SecurityTicks

CISO-level tips for securing corporate data in the cloud 24/05/2023 at 07:17 By Help Net Security The presence of each third-party application increases the potential for attacks, particularly when end users install them without proper oversight or approval. IT security teams face challenges in obtaining comprehensive knowledge about the apps connected to their corporate SaaS

React to this headline:

CISO-level tips for securing corporate data in the cloud Read More »