Tag: cloud
-
Feel Supported by Your NHI Security Team
Have You Considered the Strategic Importance of NHI Management? Consider this: The evolving technology has caused a seismic shift in how businesses protect their IT infrastructure. A crucial part of this protection is the effective management of Non-Human Identities (NHIs) and secrets. The emerging challenges in securing the cloud have emphasized the need for robust……
-
LogonBox SSPR 2.4.12 Now Available
IntroductionLogonBox is pleased to announce the immediate availability of LogonBox SSPR 2.4.12.This release includes performance improvements for large user counts, disabled account license changes, and retries for cloud-delivered OTP messages. The changelog at the bottom lists all new features and bugs fixed.Reducing memory footprintWhen large numbers of users and groups exist, this could cause issues…
-
Warning: Threat actors now abusing Google Apps Script in phishing attacks
script[.]google[.]com. The attacker is betting the user will see and trust the Google brand, and therefore trust the content.”By using a trusted platform to host the phishing page, the threat actor creates a false sense of security, obscuring the underlying threat with the goal of getting the recipient to enter their email and password without…
-
APT41 Uses Google Calendar as Covert C2 in Stealthy Cyberespionage Campaign
In an example of cloud service abuse, Google Threat Intelligence Group (GTIG) has uncovered a new APT41 campaign First seen on securityonline.info Jump to article: securityonline.info/apt41-uses-google-calendar-as-covert-c2-in-stealthy-cyberespionage-campaign/
-
Poisoned models in fake Alibaba SDKs show challenges of securing AI supply chains
Malicious code in ML models is hard to detect: While Hugging Face hosts models directly, PyPI hosts Python software packages, so detection of poisoned models hidden inside Pickle files hidden inside packages could prove even harder for developers and PyPI’s maintainers, given the extra layer of obfuscation.The attack campaign discovered by ReversingLabs involved three packages:…
-
From bottleneck to business enabler: making PKI work for digital transformation
Traditional PKI often creates security and agility bottlenecks due to manual processes and poor integration. As enterprises adopt cloud, DevOps, and Zero Trust, automated and scalable certificate management becomes essential. Modern PKI solutions must offer automation, policy enforcement, seamless integration, and broad coverage. Automated Internal PKI provides centralized control and lifecycle automation, enabling secure, efficient…
-
SentinelOne Reports Services Are Back Online After Global Outage
The outage reportedly hit 10 commercial customer consoles for SentinelOne’s Singularity platform, including Singularity Endpoint, XDR, Cloud Security, Identity, Data Lake, RemoteOps, and more. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/sentinelone-reports-services-back-online-after-global-outage
-
LogonBox VPN 2.4.12 Now Available
IntroductionLogonBox is pleased to announce the immediate availability of LogonBox VPN 2.4.12.This release includes performance improvements for large user counts, disabled account license changes, and retries for cloud-delivered OTP messages. The changelog at the bottom lists all new features and bugs fixed.Reducing memory footprintWhen large numbers of users and groups exist, this could cause issues…
-
Getting Ahead of AI Risk: What Comes Next for Tenable
The acquisition of Apex Security adds a powerful new layer of visibility, context and control to the Tenable One Exposure Management Platform to govern usage, enforce policy and control exposure across both the AI that organizations use and the AI they build. Over the past 25 years, we’ve seen the attack surface shift dramatically, from…
-
k0s Enters CNCF Sandbox: A New Lightweight Kubernetes Option
How k0s, a lightweight Kubernetes distribution, joins the CNCF Sandbox, enhancing cloud-native computing. Explore its features today! First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/k0s-enters-cncf-sandbox-a-new-lightweight-kubernetes-option/
-
AWS Centralized Product Lifecycle Page: Enhance Transparency Info
Discover AWS’s new Product Lifecycle page for tracking service changes and updates. Stay informed and enhance your cloud strategy today! First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/aws-centralized-product-lifecycle-page-enhance-transparency-info/
-
China-backed hackers hiding malware in calendar events
The APT41 nation-state threat group is exploiting yet another cloud service to mask its operations, according to new research. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/china-hackers-google-calendar-events-research/749290/
-
How Red Canary Acquisition Will Fortify Zscaler’s MDR Muscle
Zscaler Aims for SOC Leadership With Enhanced Visibility Across Endpoints and Cloud. By acquiring Denver-based startup Red Canary, cloud security stalwart Zscaler adds deep MDR functionality and aims to unify detection workflows across its customer environments using insights from its massive transaction volume, identity analytics and Red Canary’s advanced threat-hunting service. First seen on govinfosecurity.com…
-
Chinese APT41 Exploits Google Calendar for Malware CommandControl Operations
Google on Wednesday disclosed that the Chinese state-sponsored threat actor known as APT41 leveraged a malware called TOUGHPROGRESS that uses Google Calendar for command-and-control (C2).The tech giant, which discovered the activity in late October 2024, said the malware was hosted on a compromised government website and was used to target multiple other government entities.”Misuse of…
-
Neuerungen in der Cloud-Sicherheitsplattform – Crowdstrike will Cloud-Risiken jeglicher Art absichern
First seen on security-insider.de Jump to article: www.security-insider.de/crowdstrike-will-cloud-risiken-jeglicher-art-absichern-a-afefa207ed6e4bb8c45ebe8b86706860/
-
APT41 malware abuses Google Calendar for stealthy C2 communication
The Chinese APT41 hacking group uses a new malware named ‘ToughProgress’ that abuses Google Calendar for command-and-control (C2) operations, hiding malicious activity behind a trusted cloud service. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt41-malware-abuses-google-calendar-for-stealthy-c2-communication/
-
What Your Traffic Logs Aren’t Telling You About Cloud Security
Tags: cloudCloud security isn’t just about merely collecting data. You need to extract meaning from it if you want to actually improve your defenses. And while this may sound simple in practice, any seasoned cloud security practitioner will be quick to tell you otherwise. The challenge today isn’t about what you’re not seeing. Your traffic logs..…
-
Zscaler Buys Red Canary to Elevate AI-Driven Threat Response
Red Canary Purchase Aims to Deliver Agentic AI-Powered Security Operations at Scale. Zscaler’s buy of Red Canary will unify its cloud-based security infrastructure with Red Canary’s MDR insights, giving rise to a next-gen SOC built on automation, AI, and rapid detection expertise. The integration will support a proactive SOC experience powered by AI workflows and…
-
Your Mobile Apps May Not Be as Secure as You Think”¦ FireTail Blog
Tags: access, ai, android, api, authentication, banking, best-practice, cloud, control, cyber, cybersecurity, data, encryption, finance, leak, mobile, password, phone, risk, threat, vulnerabilityMay 28, 2025 – Lina Romero – Your Mobile Apps May Not Be as Secure as You Think”¦ Excerpt: Cybersecurity risks are too close for comfort. Recent data from the Global Mobile Threat Report reveals that our mobile phone applications are most likely exposing our data due to insecure practices such as API key hardcoding.…
-
Unternehmen unterschätzen Risiken von Datenverlust bei SaaS-Anwendungen
Jeden Tag verlagern Unternehmen kritische Prozesse in Cloud-basierte Software-as-a-Service (SaaS)-Anwendungen. Gleichzeitig richten Cyberkriminelle ihre Aktivitäten verstärkt auf Cloud-Dienste aus und gefährden damit Unternehmen, wobei SaaS-Anwendungen inzwischen zu den präferierten Zielen der Cyberkriminellen gehören. Im neuen E-Book zeigt Arcserve auf, dass laut Markterhebungen […] First seen on netzpalaver.de Jump to article: netzpalaver.de/2025/05/28/unternehmen-unterschaetzen-risiken-von-datenverlust-bei-saas-anwendungen/
-
Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access, Even When Uploading Just One File
Cybersecurity researchers have discovered a security flaw in Microsoft’s OneDrive File Picker that, if successfully exploited, could allow websites to access a user’s entire cloud storage content, as opposed to just the files selected for upload via the tool.”This stems from overly broad OAuth scopes and misleading consent screens that fail to clearly explain the…
-
Zscaler to Acquire Red Canary, Enhancing AI-Powered Security Operations
Zscaler, Inc. (NASDAQ: ZS), the global leader in cloud security, has announced a definitive agreement to acquire Red Canary, a top Managed Detection and Response (MDR) provider. This strategic move is set to transform security operations by integrating Zscaler’s AI-driven Zero Trust Exchange platform with Red Canary’s advanced threat detection and response capabilities, powered by…
-
251 Malicious IPs Target Cloud-Based Device Exploiting 75 Exposure Points
On May 8, 2025, cybersecurity researchers at GreyNoise detected a highly orchestrated scanning operation targeting 75 known exposure points across the internet in just 24 hours. The campaign, executed by 251 malicious IP addresses”, all geolocated to Japan and hosted on Amazon Web Services (AWS)”, triggered a diverse array of 75 distinct behaviors, including exploitation…
-
Zscaler Announces Deal to Acquire Red Canary
The August acquisition will bring together Red Canary’s extensive integration ecosystem with Zscaler’s cloud transaction data to deliver an AI-powered security operations platform. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/zscaler-announces-deal-acquire-red-canary
-
Choosing a secrets manager for multi-cloud: Doppler vs. cloud-native tools
Doppler helps teams manage secrets across clouds with one source of truth. Learn how it simplifies security, scaling, and compliance in multi-cloud environments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/choosing-a-secrets-manager-for-multi-cloud-doppler-vs-cloud-native-tools/
-
CISA Releases Executive Guide on SIEM and SOAR Platforms for Rapid Threat Detection
In today’s rapidly evolving threat landscape, Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms have become foundational to organizational cybersecurity strategies. SIEM platforms collect, centralize, and analyze log data from diverse sources, such as endpoints, servers, cloud services, and network devices, using correlation rules and filters to detect anomalous…
-
251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch
Cybersecurity researchers have disclosed details of a coordinated cloud-based scanning activity that targeted 75 distinct “exposure points” earlier this month.The activity, observed by GreyNoise on May 8, 2025, involved as many as 251 malicious IP addresses that are all geolocated to Japan and hosted by Amazon.”These IPs triggered 75 distinct behaviors, including CVE exploits, First…
-
Will AI agent-fueled attacks force CISOs to fast-track passwordless projects?
Tags: access, ai, api, attack, authentication, breach, business, ciso, cloud, credentials, cyber, cybersecurity, data, fido, finance, framework, google, Hardware, identity, login, metric, microsoft, okta, passkey, password, phishing, privacy, risk, risk-management, service, technology, threat, tool, update, zero-trustPasswordless options: In retiring passwords, security leaders will need to consider their options, passkeys, biometrics, and third-party login services, looking for the best technical, usability, and security fit. There are pros and cons for each option, and in many cases CISOs may be guided towards one based on their existing environment.Passkeys, used by Microsoft, Samsung,…