cloud security - Security Ticks

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups

APT, BlackBasta, cloud security, Cloudzy, Cyberwarfare, Halcyon, Nation-State, Ransomware / SecurityTicks

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups 01/08/2023 at 20:15 By Ionut Arghire Researchers unmask an Iranian-run company providing command-and-control services to hacking groups, including state-sponsored APT actors. The post Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

React to this headline:

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups Read More »

Keeping the cloud secure with a mindset shift

Cloud, cloud security, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Illumio, opinion / SecurityTicks

Keeping the cloud secure with a mindset shift 01/08/2023 at 08:02 By Help Net Security Gartner estimates that in 2023 worldwide end-user spending on public cloud services will grow by 21.7% and hit nearly $600 billion. Even as the economic downturn has most businesses looking for ways to tighten their belts, the cloud remains one

React to this headline:

Keeping the cloud secure with a mindset shift Read More »

US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’

cloud security, Cyberwarfare, Government / SecurityTicks

US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ 27/07/2023 at 23:17 By Ryan Naraine Redmond is accused of “negligent cybersecurity practices” that enabled a successful Chinese hack of the United States government. The post US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ Read More »

Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads

cloud security, Featured, Ubuntu, Vulnerabilities, vulnerability / SecurityTicks

Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads 27/07/2023 at 17:20 By Kevin Townsend Researchers discovered two vulnerabilities in the Ubuntu OverlayFS module: CVE-2023-2640 and CVE-2023-32629 (together dubbed ‘GameOver(lay)’). The post Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads Read More »

Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation

Amd, cloud security, CVE-2023-20593, Project Zero, Tavis Ormandy, Vulnerabilities, zenbleed / SecurityTicks

Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation 27/07/2023 at 04:18 By Ryan Naraine Researchers say a whopping 62 percent of AWS environments may be exposed to the newly documented AMD ‘Zenbleed’ information leak flaw. The post Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation appeared first on SecurityWeek. This article

React to this headline:

Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation Read More »

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails

Azure, cloud security, email authentication, email security, Featured, Government, Microsoft, MSA key / SecurityTicks

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails 21/07/2023 at 20:19 By Ryan Naraine Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online. The post Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails Read More »

Thanks Storm-0558! Microsoft to expand default access to cloud logs

APT, CISA, cloud security, Don't miss, enterprise, Government, government-backed attacks, Hot stuff, logging, Microsoft, Microsoft 365, News / SecurityTicks

Thanks Storm-0558! Microsoft to expand default access to cloud logs 20/07/2023 at 13:31 By Zeljka Zorz Starting in September 2023, more federal government and commercial Microsoft customers will have access to expanded cloud logging capabilities at no additional charge, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) have announced on Wednesday. The announcements come

React to this headline:

Thanks Storm-0558! Microsoft to expand default access to cloud logs Read More »

Exploring the macro shifts in enterprise security

attacks, Cloud, cloud security, cybersecurity, data breach, identity management, News, Ransomware, Scale, supply chain compromise, survey / SecurityTicks

Exploring the macro shifts in enterprise security 20/07/2023 at 06:04 By Help Net Security The number of successful ransomware attacks and data breach attempts fell by 30% over the last year, the number of reported security incident types at organizations increased, according to the 2023 Cybersecurity Perspectives Survey by Scale. Security incident types In fact,

React to this headline:

Exploring the macro shifts in enterprise security Read More »

Microsoft Bows to Pressure to Free Up Cloud Security Logs

China APT, CISA, cloud security, Data Breaches, Government, M365, Microsoft / SecurityTicks

Microsoft Bows to Pressure to Free Up Cloud Security Logs 19/07/2023 at 19:49 By Ryan Naraine Facing intense pressure after Chinese APT hack, Microsoft plans to expand logging defaults for lower-tier M365 customers. The post Microsoft Bows to Pressure to Free Up Cloud Security Logs appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Microsoft Bows to Pressure to Free Up Cloud Security Logs Read More »

Virtual Event Today: 2023 Cloud & Data Security Summit

Cloud, cloud security / SecurityTicks

Virtual Event Today: 2023 Cloud & Data Security Summit 19/07/2023 at 16:52 By Mike Lennon Register for the Cloud & Data Security Summit to learn how to utilize tools, controls, and design models needed to properly secure cloud environments. The post Virtual Event Today: 2023 Cloud & Data Security Summit appeared first on SecurityWeek. This

React to this headline:

Virtual Event Today: 2023 Cloud & Data Security Summit Read More »

Cisco Shopping Spree Adds Oort ID Threat Detection Tech

Acquisition, Cisco, cloud security, Funding/M&A, ITDR, M&A Tracker, Oort / SecurityTicks

Cisco Shopping Spree Adds Oort ID Threat Detection Tech 13/07/2023 at 19:31 By Ryan Naraine The planned Oort purchase is Cisco’s fourth acquisition of a cybersecurity company in the first half of 2023. The post Cisco Shopping Spree Adds Oort ID Threat Detection Tech appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Cisco Shopping Spree Adds Oort ID Threat Detection Tech Read More »

Only 45% of cloud data is currently encrypted

Cloud, cloud security, cybersecurity, data, data breach, Don't miss, News, Thales / SecurityTicks

Only 45% of cloud data is currently encrypted 13/07/2023 at 06:01 By Help Net Security 39% of businesses have experienced a data breach in their cloud environment last year, an increase on the 35% reported in 2022, according to Thales. In addition, human error was reported as the leading cause of cloud data breaches by

React to this headline:

Only 45% of cloud data is currently encrypted Read More »

Orca Sues Wiz Over Alleged Cloud Security Patent Violations

cloud security, Featured, Funding/M&A, Orca Security, patent infringement, Wiz / SecurityTicks

Orca Sues Wiz Over Alleged Cloud Security Patent Violations 12/07/2023 at 23:18 By Ryan Naraine Orca Security sues its main rival, claiming patent infringements, intellectual property theft and even marketing copycat behavior. The post Orca Sues Wiz Over Alleged Cloud Security Patent Violations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Orca Sues Wiz Over Alleged Cloud Security Patent Violations Read More »

Chinese hackers forged authentication tokens to breach government emails

cloud security, cyber espionage, data theft, Don't miss, Europe, Government, Hot stuff, Microsoft, News, Outlook, USA, vulnerability / SecurityTicks

Chinese hackers forged authentication tokens to breach government emails 12/07/2023 at 13:17 By Zeljka Zorz Sophisticated hackers have accessed email accounts of organizations and government agencies via authentication tokens they forged by using an acquired Microsoft account (MSA) consumer signing key, the company has revealed on Tuesday. “The threat actor Microsoft links to this incident

React to this headline:

Chinese hackers forged authentication tokens to breach government emails Read More »

Now’s the Time for a Pragmatic Approach to New Technology Adoption

Artificial Intelligence, cloud security / SecurityTicks

Now’s the Time for a Pragmatic Approach to New Technology Adoption 06/07/2023 at 21:32 By Marc Solomon What a cloud migration strategy did for cloud adoption, an automation implementation strategy does for security automation adoption. The post Now’s the Time for a Pragmatic Approach to New Technology Adoption appeared first on SecurityWeek. This article is

React to this headline:

Now’s the Time for a Pragmatic Approach to New Technology Adoption Read More »

Cloud security: Sometimes the risks may outweigh the rewards

Akamai, Cloud, cloud computing, cloud security, cybersecurity, Don't miss, Expert analysis, Hot stuff, News, opinion, vulnerability / SecurityTicks

Cloud security: Sometimes the risks may outweigh the rewards 03/07/2023 at 07:32 By Help Net Security Threat actors are well-aware of the vulnerability of our cloud infrastructure. The internet we have today is not equipped to serve the data needs of the future. When data is stored in the cloud, it can end up across

React to this headline:

Cloud security: Sometimes the risks may outweigh the rewards Read More »

One third of security breaches go unnoticed by security professionals

cloud security, cybersecurity, Flexera, Forrester Research, Gigamon, hybrid cloud, News, report / SecurityTicks

One third of security breaches go unnoticed by security professionals 03/07/2023 at 06:32 By Help Net Security While surface-level confidence around hybrid cloud security is high, with 94% of global respondents stating their security tools and processes provide them with complete visibility and insights into their IT infrastructure, the reality is nearly one third of

React to this headline:

One third of security breaches go unnoticed by security professionals Read More »

Data Security Firm Cyera Attracts $100M Investment

Accel, cloud security, Cyera, Data Protection, Funding/M&A, Sequioa / SecurityTicks

Data Security Firm Cyera Attracts $100M Investment 27/06/2023 at 20:12 By Ryan Naraine Cyera closes a massive $100 million round as investors continue to pour cash into the data security posture management (DSPM) space. The post Data Security Firm Cyera Attracts $100M Investment appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Data Security Firm Cyera Attracts $100M Investment Read More »

95% fear inadequate cloud security detection and response

Cloud, cloud security, data breach, identity, News, Permiso, report / SecurityTicks

95% fear inadequate cloud security detection and response 27/06/2023 at 06:37 By Help Net Security Although numerous respondents acknowledged employing risky practices and behaviors within their cloud environments, they strongly believe in the effectiveness of their security tools and processes to safeguard their organizations against meticulously planned attacks, according to Permiso. That high confidence level

React to this headline:

95% fear inadequate cloud security detection and response Read More »

Uncovering attacker tactics through cloud honeypots

attacks, Cloud, cloud security, Don't miss, honeypots, News, Orca Security, report / SecurityTicks

Uncovering attacker tactics through cloud honeypots 26/06/2023 at 06:12 By Help Net Security Attackers typically find exposed “secrets” – pieces of sensitive information that allow access to an enterprise cloud environment — in as little as two minutes and, in many cases, begin exploiting them almost instantly, highlighting the urgent need for comprehensive cloud security,

React to this headline:

Uncovering attacker tactics through cloud honeypots Read More »