Tag: cloud
-
Rückzug aus der Cloud: Ernüchterung nach der Euphorie
Tags: cloudSo manche Firma ändert derzeit ihre Cloudstrategie, nicht nur wegen Trumps neuer Präsidentschaft. Denn Gründe für den Ausstieg aus der Cloud gibt es viele. First seen on golem.de Jump to article: www.golem.de/news/rueckzug-aus-der-cloud-ernuechterung-nach-der-euphorie-2503-194631.html
-
Cloud Computing auf Nummer Sicher – Gute Wege, die Multicloud abzusichern
First seen on security-insider.de Jump to article: www.security-insider.de/multicloud-umgebung-sicherheit-best-practices-tools-a-c4701f725a245200ed4eb6270fa1ab28/
-
CVE-2025-1974: IngressNightmare Flaws Threaten Kubernetes Clusters
Critical Flaws in Ingress NGINX Controller Enable Remote Code Execution A newly disclosed set of five severe vulnerabilities, dubbed IngressNightmare by cloud security firm Wiz, has put more than 6,500 Kubernetes clusters at risk. These critical flaws impact the Ingress… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2025-1974-ingressnightmare-flaws-threaten-kubernetes-clusters/
-
IngressNightmare: Four Critical Bugs Found in 40% of Cloud Systems
Wiz Security finds four critical RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ingressnightmare-critical-bugs-40/
-
You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?
Just an FYI, like First seen on theregister.com Jump to article: www.theregister.com/2025/03/25/generative_ai_browser_extensions_privacy/
-
AUDITOR: Erste DSGVO-Zertifizierung speziell für Cloud-Dienste
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/auditor-dsgvo-zertifizierung-cloud-dienste
-
Deutschlands Digitale Souveränität adé durch Trump, BSI und Google
Kürzlich wurde eine Kooperation des Bundesamt für Sicherheit in der Informationsverarbeitung (BSI) mit dem US-Anbieter Google zwecke Etablierung einer Cloud-Lösung bekannt. Drei Arbeitskreise der Gesellschaft für Informatik (GI) haben die geplante Kooperation von BSI und Google mit großer Sorge zur … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/25/deutschlands-digitale-souveraenitaet-ade-durch-trump-bsi-und-google/
-
Oracle Cloud Data Breach Claims Repudiated
First seen on scworld.com Jump to article: www.scworld.com/brief/oracle-cloud-data-breach-claims-repudiated
-
Massive Oracle Cloud Breach: 6M Records Exposed, 140k+ Tenants Risked
Oracle Cloud breach exposed 6M records from 140k+ tenants. Learn how attackers exploited vulnerabilities and steps organizations must take to secure data. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/trends/oracle-cloud-breach-6m-records-140k-tenants-risk/
-
Kubernetes Patch: 43% of Clusters Face Remote Takeover Risk
Immediate Patching Urged to Address Flaws in Widely Used Ingress Nginx Controller. Critical vulnerabilities in Ingress Nginx Controller – a widely used component of the popular Kubernetes container management system – need immediate patching to prevent attackers from taking control of cloud-based applications, management interfaces and more, researchers warned. First seen on govinfosecurity.com Jump to…
-
Oracle Denies Claim of Oracle Cloud Breach of 6M Records
A threat actor posted data on Breachforums from an alleged supply-chain attack that affected more than 140K tenants, claiming to have compromised the cloud via a zero-day flaw in WebLogic, researchers say. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/oracle-denies-claim-oracle-cloud-breach-6m-records
-
Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks
Acronis Threat Research found 2M+ malicious URLs & 5,000+ malware instances in Microsoft 365 backup data”, demonstrating how built-in security isn’t always enough. Don’t let threats persist in your cloud data. Strengthen your defenses. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hidden-threats-how-microsoft-365-backups-store-risks-for-future-attacks/
-
Oracle Denies Cloud Breach After Hacker Offers to Sell Data
Oracle has denied that Cloud systems have been breached after a hacker claimed to have stolen millions of records. The post Oracle Denies Cloud Breach After Hacker Offers to Sell Data appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/oracle-denies-cloud-breach-after-hacker-offers-to-sell-data/
-
Oracle Cloud breach may impact 140,000 enterprise customers
Tags: access, attack, authentication, breach, business, cloud, control, credentials, data, extortion, finance, hacker, mfa, mitigation, oracle, password, radius, ransom, risk, security-incident, service, strategy, supply-chain, threatBusiness impact and risks: In an alarming development, the threat actor has initiated an extortion campaign, contacting affected companies and demanding payment to remove their data from the stolen cache. This creates immediate financial pressure and complex legal and ethical decisions for victims regarding ransom payments.To increase pressure on both Oracle and affected organizations, the…
-
AWS und das BSI kooperieren für mehr Cloud-Sicherheit
Das Bundesamt für Sicherheit in der Informationstechnik (BSI) und Amazon Web Services (AWS) haben eine Kooperationsvereinbarung geschlossen. Ziel ist die Entwicklung und Anpassung von Standards und Validierungsprozessen an Cloud-Umgebungen, die traditionell für Onpremises-Systeme konzipiert wurden. Gemeinsam soll ein Umfeld geschaffen werden, das die Sicherheit digitaler Infrastrukturen erhöht und gleichzeitig den technologischen Fortschritt unterstützt. Die wichtigsten…
-
CISOs are taking on ever more responsibilities and functional roles has it gone too far?
Tags: ai, business, cio, ciso, cloud, compliance, computing, control, corporate, cyber, cybersecurity, data, defense, framework, fraud, governance, healthcare, infosec, intelligence, international, Internet, jobs, law, mitigation, nist, privacy, regulation, resilience, risk, risk-management, service, skills, software, supply-chain, technology, threatth century alongside technology and internet-enabled threats, morphing to meet the demands of the moment. But the position hasn’t just matured; in many cases it has expanded, taking on additional domains.”The CISO role has expanded significantly over the years as companies realize that information security has a unique picture of what is going on across…
-
Trump’s Aggression Sours Europe on US Cloud Giants
Companies in the EU are starting to look for ways to ditch Amazon, Google, and Microsoft cloud services amid fears of rising security risks from the US. But cutting ties won’t be easy. First seen on wired.com Jump to article: www.wired.com/story/trump-us-cloud-services-europe/
-
China’s Baidu Compromised in Data Leak, Affecting Users
Chinese tech giant Baidu has faced severe scrutiny after allegations emerged that a top executive’s teenage daughter had accessed and shared personal details of internet users online. The incident has raised significant concerns about data privacy and security at one of China’s largest cloud providers. The controversy began when online users accused the teenage daughter…
-
Cloud providers aren’t delivering on security promises
Security concerns around cloud environments has prompted 44% of CISOs to change cloud service provider, according to Arctic Wolf. This is being driven by the fact that 24% … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/24/cloud-environments-security-concerns/
-
How do I streamline NHI onboarding in identity management systems?
Are you effectively managing Non-Human Identities in your organization? In the quest to navigate the cloud’s labyrinthine complexities, one aspect often overlooked is the management of Non-Human Identities (NHIs). NHIs, the machine identities that play a crucial role in cybersecurity, are increasingly fundamental in the digital ecosystem. The management of these entities not only secures……
-
Oracle Cloud says it’s not true someone broke into its login servers and stole data
Despite evidence to the contrary as alleged pilfered info goes on sale First seen on theregister.com Jump to article: www.theregister.com/2025/03/23/oracle_cloud_customers_keys_credentials/
-
Oracle Denies Breach Amid Hacker’s Claim of Access to 6 Million Records
Oracle denies breach claims as hacker alleges access to 6 million cloud records. CloudSEK reports a potential zero-day exploit affecting 140,000 tenants. First seen on hackread.com Jump to article: hackread.com/oracle-denies-breach-hacker-access-6-million-records/
-
Oracle Cloud SSO, LDAP Records Dumped, 140k+ Tenants Affected
On March 21, security threat intel vendor CloudSEK published a report on a forum post from a threat actor claiming to have exfiltrated around 6 First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2025/03/21/oracle-cloud-sso-ldap-records-dumped-140k-tenants-affected/
-
A Peek on Cloud Security: JSSI 2025
At JSSI 2025, French IT security experts discussed the cloud’s impact on security. Presentations covered strategy and technical analysis. GitGuardian’s researchers shared insights on detecting secrets in the cloud and responsibly disclosing them to companies. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/a-peek-on-cloud-security-jssi-2025/
-
Oracle denies breach after hacker claims theft of 6 million data records
Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company’s Oracle Cloud federated SSO login servers First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-denies-data-breach-after-hacker-claims-theft-of-6-million-data-records/
-
How Google-Wiz Deal Counters Microsoft Defender’s Dominance
Google Aims to Match Microsoft Defender With $32B Buy of Wiz’s Cloud Security Tech. Google’s plan to buy cloud security firm Wiz for $32 billion highlights its drive to compete with Microsoft Defender and expand multi-cloud protection, and will put pressure on AWS to respond. Forrester Analyst Andras Cser says Wiz will likely remain independent…
-
Wiz Product, Channel Strategy Led To $32B Google Acquisition Deal: Partner CEO
Wiz adopted the channel ‘early on’ and continually made smart investments into its cloud and AI security platform, according to the CEO of system integrator Evotek. First seen on crn.com Jump to article: www.crn.com/news/security/2025/wiz-product-channel-strategy-led-to-32b-google-acquisition-deal-partner-ceo
-
What Google’s $32B Wiz Buy Means for Cloud Security and the Channel
First seen on scworld.com Jump to article: www.scworld.com/analysis/what-googles-32b-wiz-buy-means-for-cloud-security-and-the-channel
-
ISMG Editors: Impact of Google’s $32B Buy on Cloud Security
Also: Trump’s Cybersecurity Shake-Up, IBM’s X-Force Event Highlights. In this week’s update, ISMG editors explore Google’s record-breaking $32B Wiz acquisition and its impact on cloud security, the shake-up in Trump’s cybersecurity leadership team amid budget cuts, and key takeaways from the IBM X-Force Cyber Range cyber response event. First seen on govinfosecurity.com Jump to article:…