cloud security - Security Ticks

Dangling DNS Used to Hijack Subdomains of Major Organizations

Dangling DNS Used to Hijack Subdomains of Major Organizations 31/08/2023 at 12:32 By Eduard Kovacs Dangling DNS records were abused by researchers to hijack subdomains belonging to major organizations, warning that thousands of entities are impacted. The post Dangling DNS Used to Hijack Subdomains of Major Organizations appeared first on SecurityWeek. This article is an […]

React to this headline:

Dangling DNS Used to Hijack Subdomains of Major Organizations Read More »

Lack of visibility into cloud access policies leaves enterprises flying blind

access management, authentication, cloud computing, cloud security, Compliance, cybersecurity, identity, News, passwordless, Privacy, report, Strata Identity / SecurityTicks

Lack of visibility into cloud access policies leaves enterprises flying blind 24/08/2023 at 06:00 By Help Net Security Fragmented access policies are top security concern in multi-cloud environments, with more than 75% of enterprises reporting they do not know where applications are deployed and who has access to them, according to Strata Identity. Cloud security

React to this headline:

Lack of visibility into cloud access policies leaves enterprises flying blind Read More »

Grip Security Lands $41 Million Series B Financing

cloud security, Funding/M&A, Grip Security, identity, Identity & Access, venture capital / SecurityTicks

Grip Security Lands $41 Million Series B Financing 22/08/2023 at 14:33 By Ryan Naraine Israeli startup Grip Security has banked $41 million in new financing from a group of investors led by Third Point Ventures. The post Grip Security Lands $41 Million Series B Financing appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Grip Security Lands $41 Million Series B Financing Read More »

Maintaining consistent security in diverse cloud infrastructures

CISO, Cloud, cloud computing, cloud security, cyber resilience, cybersecurity, DevOps, Don't miss, Features, Hot stuff, misconfiguration, Mitigant, monitoring, News, opinion, training / SecurityTicks

Maintaining consistent security in diverse cloud infrastructures 22/08/2023 at 07:01 By Mirko Zorz As cloud infrastructures become increasingly API-driven and dynamically spread across expansive attack surfaces, achieving clarity proves difficult. Compounding this challenge is the integration of DevOps practices, microservices, and container technologies, which, while fostering agility and scalability, introduce additional layers of complexity and

React to this headline:

Maintaining consistent security in diverse cloud infrastructures Read More »

ProjectDiscovery Lands $25M Investment for Cloud Security Tech

cloud security, Data Breaches, Funding/M&A / SecurityTicks

ProjectDiscovery Lands $25M Investment for Cloud Security Tech 18/08/2023 at 02:31 By Ryan Naraine San Francisco startup ProjectDiscovery has banked $25 million in early-stage financing as investors continue bet on cloud security vendors. The post ProjectDiscovery Lands $25M Investment for Cloud Security Tech appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

ProjectDiscovery Lands $25M Investment for Cloud Security Tech Read More »

CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership

CISO, CISO Conversations, cloud security, Featured / SecurityTicks

CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership 15/08/2023 at 16:31 By Kevin Townsend SecurityWeek talks to Billy Spears, CISO at Teradata (a multi-cloud analytics provider), and Lea Kissner, CISO at cloud security firm Lacework. The post CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership appeared first on SecurityWeek.

React to this headline:

CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership Read More »

US Cyber Safety Board to Review Cloud Attacks

cloud security, Government / SecurityTicks

US Cyber Safety Board to Review Cloud Attacks 14/08/2023 at 18:16 By Ionut Arghire The US government’s CSRB will conduct a review of cloud security to provide recommendations on improving identity management and authentication. The post US Cyber Safety Board to Review Cloud Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

US Cyber Safety Board to Review Cloud Attacks Read More »

Managing and Securing Distributed Cloud Environments

cloud security / SecurityTicks

Managing and Securing Distributed Cloud Environments 10/08/2023 at 17:18 By Joshua Goldfarb The complexity and challenge of distributed cloud environments often necessitate managing multiple infrastructure, technology, and security stacks, multiple policy engines, multiple sets of controls, and multiple asset inventories. The post Managing and Securing Distributed Cloud Environments appeared first on SecurityWeek. This article is

React to this headline:

Managing and Securing Distributed Cloud Environments Read More »

Sweet Security Emerges From Stealth With $12 Million Seed Funding and a Cloud Runtime Solution

cloud security, Cybersecurity Funding / SecurityTicks

Sweet Security Emerges From Stealth With $12 Million Seed Funding and a Cloud Runtime Solution 09/08/2023 at 17:03 By Kevin Townsend Israeli startup emerged from stealth with $12 million in Seed funding and launched a Cloud Runtime Security Suite. The post Sweet Security Emerges From Stealth With $12 Million Seed Funding and a Cloud Runtime

React to this headline:

Sweet Security Emerges From Stealth With $12 Million Seed Funding and a Cloud Runtime Solution Read More »

Cloud Security Firm Kivera Raises $3.5 Million in Seed Funding

cloud security, Cybersecurity Funding / SecurityTicks

Cloud Security Firm Kivera Raises $3.5 Million in Seed Funding 09/08/2023 at 15:17 By Kevin Townsend Australian cybersecurity startup Kivera raised $3.5 million in seed funding from General Advance, Round 13 Capital and angel investors. The post Cloud Security Firm Kivera Raises $3.5 Million in Seed Funding appeared first on SecurityWeek. This article is an

React to this headline:

Cloud Security Firm Kivera Raises $3.5 Million in Seed Funding Read More »

In Other News: Cybersecurity Funding Rebounds, Cloud Threats, BeyondTrust Vulnerability

cloud security, Cybersecurity Funding, Vulnerabilities / SecurityTicks

In Other News: Cybersecurity Funding Rebounds, Cloud Threats, BeyondTrust Vulnerability 04/08/2023 at 17:48 By SecurityWeek News Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 31, 2023. The post In Other News: Cybersecurity Funding Rebounds, Cloud Threats, BeyondTrust Vulnerability appeared first

React to this headline:

In Other News: Cybersecurity Funding Rebounds, Cloud Threats, BeyondTrust Vulnerability Read More »

These Are the Top Five Cloud Security Risks, Qualys Says

Cloud, cloud security, Risk Management, Vulnerabilities / SecurityTicks

These Are the Top Five Cloud Security Risks, Qualys Says 03/08/2023 at 17:47 By Kevin Townsend Cloud security specialist Qualys has provided its view of the top five cloud security risks, drawing insights and data from its own platform and third parties. The post These Are the Top Five Cloud Security Risks, Qualys Says appeared

React to this headline:

These Are the Top Five Cloud Security Risks, Qualys Says Read More »

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App

cloud security, Featured, Nation-State / SecurityTicks

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App 03/08/2023 at 01:01 By Ryan Naraine Microsoft says a Russian government-linked hacking group is using its Microsoft Teams chat app to phish for credentials at targeted organizations. The post Microsoft Catches Russian Government Hackers Phishing with Teams Chat App appeared first on SecurityWeek. This article

React to this headline:

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App Read More »

Attackers can turn AWS SSM agents into remote access trojans

AWS, cloud computing, cloud security, Don't miss, enterprise, Hot stuff, Mitiga, News, Remote Access Trojan, research / SecurityTicks

Attackers can turn AWS SSM agents into remote access trojans 02/08/2023 at 16:02 By Zeljka Zorz Mitiga researchers have documented a new post-exploitation technique attackers can use to gain persistent remote access to AWS Elastic Compute Cloud (EC2) instances (virtual servers), as well as to non-EC2 machines (e.g., on-premises enterprise servers and virtual machines, and

React to this headline:

Attackers can turn AWS SSM agents into remote access trojans Read More »

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups

APT, BlackBasta, cloud security, Cloudzy, Cyberwarfare, Halcyon, Nation-State, Ransomware / SecurityTicks

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups 01/08/2023 at 20:15 By Ionut Arghire Researchers unmask an Iranian-run company providing command-and-control services to hacking groups, including state-sponsored APT actors. The post Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups Read More »

Keeping the cloud secure with a mindset shift

Cloud, cloud security, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Illumio, opinion / SecurityTicks

Keeping the cloud secure with a mindset shift 01/08/2023 at 08:02 By Help Net Security Gartner estimates that in 2023 worldwide end-user spending on public cloud services will grow by 21.7% and hit nearly $600 billion. Even as the economic downturn has most businesses looking for ways to tighten their belts, the cloud remains one

React to this headline:

Keeping the cloud secure with a mindset shift Read More »

US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’

cloud security, Cyberwarfare, Government / SecurityTicks

US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ 27/07/2023 at 23:17 By Ryan Naraine Redmond is accused of “negligent cybersecurity practices” that enabled a successful Chinese hack of the United States government. The post US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ Read More »

Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads

cloud security, Featured, Ubuntu, Vulnerabilities, vulnerability / SecurityTicks

Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads 27/07/2023 at 17:20 By Kevin Townsend Researchers discovered two vulnerabilities in the Ubuntu OverlayFS module: CVE-2023-2640 and CVE-2023-32629 (together dubbed ‘GameOver(lay)’). The post Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads Read More »

Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation

Amd, cloud security, CVE-2023-20593, Project Zero, Tavis Ormandy, Vulnerabilities, zenbleed / SecurityTicks

Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation 27/07/2023 at 04:18 By Ryan Naraine Researchers say a whopping 62 percent of AWS environments may be exposed to the newly documented AMD ‘Zenbleed’ information leak flaw. The post Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation appeared first on SecurityWeek. This article

React to this headline:

Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation Read More »

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails

Azure, cloud security, email authentication, email security, Featured, Government, Microsoft, MSA key / SecurityTicks

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails 21/07/2023 at 20:19 By Ryan Naraine Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online. The post Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails Read More »