Tag: cloud
-
Threat actor in Oracle Cloud breach may have gained access to production environments
Researchers from CloudSEK are analyzing a data sample from a threat actor that claimed a massive breach involving 6 million records.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/oracle-cloud-breach-production-environments/743720/
-
High-Severity Cloud Security Alerts Tripled in 2024
Attackers aren’t just spending more time targeting the cloud, they’re ruthlessly stealing more sensitive data and accessing more critical systems than ever before. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/high-severity-cloud-security-alerts-tripled-2024
-
Cloud-Diversifikation – Kein ‘All-In” in der Cloud-Strategie
First seen on security-insider.de Jump to article: www.security-insider.de/it-strategie-optimierung-durch-cloud-technologie-a-a7a2f3a159a48cd93aa126c595d365ba/
-
Dozens of solar inverter flaws could be exploited to attack power grids
Dozens of vulnerabilities in products from three leading makers of solar inverters, Sungrow, Growatt, and SMA, could be exploited to control devices or execute code remotely on the vendor’s cloud platform. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dozens-of-solar-inverter-flaws-could-be-exploited-to-attack-power-grids/
-
Trotz Hinweise: Oracle dementiert Cyberattacke
Tags: access, bug, cloud, computer, cyberattack, dark-web, mail, oracle, password, security-incidentObwohl Sicherheitsforscher Hinweise für einen Datendiebstahl bei Oracle entdeckt haben, streitet das Unternehmen den Vorfall ab. Sicherheitsforscher von CloudSEK haben kürzlich entdeckt, dass im Darknet sensible Daten von mehr als 140.000 Oracle-Kunden zum Verkauf stehen. Diese Informationen sollen aus einer Cyberattacke auf die Oracle Cloud stammen. Die Forscher gehen davon aus, dass der Angreifer sich…
-
Splunk RCE Vulnerability Enables Remote Code Execution via File Upload
A severe vulnerability in Splunk Enterprise and Splunk Cloud Platform has been identified, allowing for Remote Code Execution (RCE) via file uploads. This exploit can be triggered by a low-privileged user, highlighting significant security risks for affected organizations. Vulnerability Overview: The vulnerability, tracked as CVE-2025-20229, has a CVSSv3.1 score of 8.0, classified as High. The…
-
Identity security: A critical defense in 2025’s threat landscape
The traditional perimeter is no longer what protects our critical information and systems. In 2025, securing data is dependent on identity. With distributed multi-cloud, multi-IDP environments, the business world is up against a stark reality: the username and password have become the most dangerous attack vector in cybersecurity. Today, making identity as a Tier 1……
-
Oracle Breach: The Impact is Bigger Than You Think – Grip
Learn how the Oracle breach amplifies your risk from rogue cloud tenants plus how Grip helps organizations detect exposure and respond fast to mitigate risks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/oracle-breach-the-impact-is-bigger-than-you-think-grip/
-
CoffeeLoader: A Brew of Stealthy Techniques
IntroductionZscaler ThreatLabz has identified a new sophisticated malware family that we named CoffeeLoader, which originated around September 2024. The purpose of the malware is to download and execute second-stage payloads while evading detection by endpoint-based security products. The malware uses numerous techniques to bypass security solutions, including a specialized packer that utilizes the GPU, call…
-
Oracle customers confirm data stolen in alleged cloud breach is valid
Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data for 6 million people, BleepingComputer has confirmed with multiple companies that associated data samples shared by the threat actor are valid. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-customers-confirm-data-stolen-in-alleged-cloud-breach-is-valid/
-
Commerce limits 19 Chinese, Taiwanese companies from buying U.S. tech
The sanctions place the companies under a strict licensing regime meant to limit their access to foundational technology for quantum computing, cloud and AI. First seen on cyberscoop.com Jump to article: cyberscoop.com/commerce-sanctions-chinese-firms-quantum-computing-ai-cloud/
-
StreamElements discloses third-party data breach after hacker leaks data
Cloud-based streaming company StreamElements confirms it suffered a data breach at a third-party service provider after a threat actor leaked samples of stolen data on a hacking forum. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/streamelements-discloses-third-party-data-breach-after-hacker-leaks-data/
-
Threat Actors Abuse Trust in Cloud Collaboration Platforms
Threat actors are exploiting cloud platforms like Adobe and Dropbox to evade email gateways and steal credentials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/threat-actors-abuse-cloud-platforms/
-
KI-Agenten erobern die Cybersicherheitsbranche
Tags: ai, cloud, cyberattack, cyersecurity, edr, governance, identity, intelligence, mail, microsoft, phishing, soar, soc, strategy, threat, tool, update, vulnerabilityMicrosoft führt KI-Agenten ein, um die Cybersicherheit angesichts zunehmender Bedrohungen zu automatisieren.KI-Agenten, die in der Lage sind, Code auszuführen und Websuchen durchzuführen, gewinnen in der gesamten Tech-Branche an Bedeutung. Ein weiteres Feld, welches immer wichtiger wird, ist automatisierte Sicherheit.Diese Tools sind geeignet für Aufgaben wiePhishing-Erkennung,Datenschutz undIdentitätsmanagement.Hierbei handelt es sich um Bereiche, in denen Angreifer unvermindert…
-
Mit GenAI zum Insider-Threat
Tags: ai, best-practice, ciso, cloud, cyersecurity, data-breach, framework, infrastructure, injection, intelligence, mitre, password, risk, risk-management, technology, threat, toolViele Unternehmen haben nicht auf dem Schirm, welche Sicherheitsprobleme durch die Nutzung von GenAI entstehen.Einer Analyse von Netskope zufolge sind GenAI-Daten-Uploads in Unternehmen innerhalb eines Jahres um das 30-Fache gestiegen. Darunter befinden sich demnach auch sensible Informationen wie Quellcodes, regulierte Daten, Passwörter und Schlüssel sowie geistiges Eigentum.Zudem nutzen drei von vier Unternehmen Apps mit integrierten…
-
VMware plugs a high-risk vulnerability affecting its Windows-based virtualization
Patching is the only workaround: Broadcom advisory noted that the flaw does not have any workarounds and customers must apply patches rolled out on Tuesday to defend against exploitation.Affected products include all 11.x and 12.x versions of VMware tools for Windows, and are patched in the 12.5.1[1] rollout. VMware tools for Linux and macOS remain…
-
String of defects in popular Kubernetes component puts 40% of cloud environments at risk
Researchers aren’t aware of active exploitation in the wild, but they warn the risk for publicly exposed and unpatched Ingress Nginx controllers is extremely high. First seen on cyberscoop.com Jump to article: cyberscoop.com/kubernetes-nginx-controller-defects-wiz/
-
Security Firms Say Evidence Seems to Confirm Oracle Cloud Hack
Despite Oracle categorically denying that its Cloud systems have been breached, sample data released by the hacker seems to prove otherwise. The post Security Firms Say Evidence Seems to Confirm Oracle Cloud Hack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/security-firms-say-evidence-seems-to-confirm-oracle-cloud-hack/
-
Rising attack exposure, threat sophistication spur interest in detection engineering
Tags: access, ai, attack, automation, banking, ceo, ciso, cloud, compliance, cyber, cybersecurity, data, detection, endpoint, exploit, finance, framework, healthcare, infrastructure, insurance, intelligence, LLM, malware, mitre, network, programming, ransomware, RedTeam, risk, sans, siem, software, supply-chain, tactics, technology, threat, tool, update, vulnerability, zero-dayMore than the usual threat detection practices: Proponents argue that detection engineering differs from traditional threat detection practices in approach, methodology, and integration with the development lifecycle. Threat detection processes are typically more reactive and rely on pre-built rules and signatures from vendors that offer limited customization for the organizations using them. In contrast, detection…
-
After Detecting 30B Phishing Attempts, Microsoft Adds Even More AI to Its Security Copilot
Microsoft is partnering with top firms to launch new AI security tools, boosting breach analysis, threat detection, and AI model protection across cloud platforms. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-ai-agents-security-copilot/
-
There are perhaps 10,000 reasons to doubt Oracle Cloud’s security breach denial
Customers come forward claiming info was swiped from prod First seen on theregister.com Jump to article: www.theregister.com/2025/03/25/oracle_breach_update/
-
Researchers back claim of Oracle Cloud breach despite company’s denials
Security researchers from CloudSEK provided additional evidence supporting a hacker’s claim to have exfiltrated 6 million records. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/researchers-oracle-cloud-breach/743447/
-
ARMO Unveils First Cloud App Detection Response Solution for Seamless CodeCloud Security
Tel Aviv, Israel, March 25th, 2025, CyberNewsWire ARMO CADR minimizes the cloud attack surface, detects and responds to unknown and known cyberattacks while ensuring business continuity, combining the power of CDR and ADR solutions ARMO, the leading Cloud Runtime Security company and the creator of Kubescape, announced today the launch of its Behavioral Cloud Application Detection…
-
Critical vulnerabilities put Kubernetes environments in jeopardy
Wiz researchers warned that several CVEs in Ingress NGINX Controller for Kubernetes make nearly half of all cloud environments at risk of takeover. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/critical-vulnerabilities-kubernetes-jeopardy/743448/
-
Zscaler AI Security-Report: Explosionsartiger Anstieg der KI/ML-Nutzung in Unternehmen
Der jährliche ThreatLabz-Bericht von Zscaler zeigt eine dramatische Zunahme der KI/ML-Nutzung in Unternehmen: Die Anzahl der KI/ML-Transaktionen in der weltgrößten Sicherheits-Cloud ist um mehr als 3.000 Prozent gestiegen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zscaler-ai-security-report-explosionsartiger-anstieg-der-ki-ml-nutzung-in-unternehmen/a40250/
-
KI/ML-Transaktionen steigen immens, aber Sicherheitsbedenken bleiben bestehen
Der jährliche ThreatLabz-Bericht von Zscaler zeigt 36-mal mehr KI/ML-Transaktionen in der weltgrößten Sicherheits-Cloud und unterstreicht die Notwendigkeit von Zero-Trust-Everywhere für eine sichere GenAI-Adoption und zum Stoppen von KI-gestützten Bedrohungen. Der jährliche von Zscaler beruht auf mehr als 536 Milliarden KI-Transaktionen in der Zscaler Zero-Trust-Exchange-Plattform. Die Analyse der Transaktionen in der […] First seen on netzpalaver.de…
-
Harsche Kritik der GI – BSI und Google wollen sichere Cloud-Lösungen entwickeln
First seen on security-insider.de Jump to article: www.security-insider.de/bsi-google-zusammenarbeit-sichere-cloud-loesungen-datensouveraenitaet-a-b473f5000d4b6fc8d01bb56146bdcd9c/
-
Cloud Computing auf Nummer Sicher – Gute Wege, die Multicloud abzusichern
First seen on security-insider.de Jump to article: www.security-insider.de/multicloud-umgebung-sicherheit-best-practices-tools-a-c4701f725a245200ed4eb6270fa1ab28/
-
Microsoft launches AI agents to automate cybersecurity amid rising threats
Tags: ai, cloud, cybersecurity, data, governance, identity, intelligence, microsoft, risk, strategy, threat, tool, vulnerabilityIntegration benefits for customers: Microsoft said the six new Security Copilot agents are designed to help security teams autonomously manage high-volume security and IT tasks while integrating smoothly with the broader Microsoft Security portfolio.According to Grover, the move is likely to benefit organizations already embedded in the Microsoft ecosystem, as the platform-centric approach offers advantages…