Tag: cloud
-
Oracle customers confirm data stolen in alleged cloud breach is valid
Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data for 6 million people, BleepingComputer has confirmed with multiple companies that associated data samples shared by the threat actor are valid. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-customers-confirm-data-stolen-in-alleged-cloud-breach-is-valid/
-
Commerce limits 19 Chinese, Taiwanese companies from buying U.S. tech
The sanctions place the companies under a strict licensing regime meant to limit their access to foundational technology for quantum computing, cloud and AI. First seen on cyberscoop.com Jump to article: cyberscoop.com/commerce-sanctions-chinese-firms-quantum-computing-ai-cloud/
-
VMware plugs a high-risk vulnerability affecting its Windows-based virtualization
Patching is the only workaround: Broadcom advisory noted that the flaw does not have any workarounds and customers must apply patches rolled out on Tuesday to defend against exploitation.Affected products include all 11.x and 12.x versions of VMware tools for Windows, and are patched in the 12.5.1[1] rollout. VMware tools for Linux and macOS remain…
-
String of defects in popular Kubernetes component puts 40% of cloud environments at risk
Researchers aren’t aware of active exploitation in the wild, but they warn the risk for publicly exposed and unpatched Ingress Nginx controllers is extremely high. First seen on cyberscoop.com Jump to article: cyberscoop.com/kubernetes-nginx-controller-defects-wiz/
-
StreamElements discloses third-party data breach after hacker leaks data
Cloud-based streaming company StreamElements confirms it suffered a data breach at a third-party service provider after a threat actor leaked samples of stolen data on a hacking forum. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/streamelements-discloses-third-party-data-breach-after-hacker-leaks-data/
-
Threat Actors Abuse Trust in Cloud Collaboration Platforms
Threat actors are exploiting cloud platforms like Adobe and Dropbox to evade email gateways and steal credentials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/threat-actors-abuse-cloud-platforms/
-
KI-Agenten erobern die Cybersicherheitsbranche
Tags: ai, cloud, cyberattack, cyersecurity, edr, governance, identity, intelligence, mail, microsoft, phishing, soar, soc, strategy, threat, tool, update, vulnerabilityMicrosoft führt KI-Agenten ein, um die Cybersicherheit angesichts zunehmender Bedrohungen zu automatisieren.KI-Agenten, die in der Lage sind, Code auszuführen und Websuchen durchzuführen, gewinnen in der gesamten Tech-Branche an Bedeutung. Ein weiteres Feld, welches immer wichtiger wird, ist automatisierte Sicherheit.Diese Tools sind geeignet für Aufgaben wiePhishing-Erkennung,Datenschutz undIdentitätsmanagement.Hierbei handelt es sich um Bereiche, in denen Angreifer unvermindert…
-
Mit GenAI zum Insider-Threat
Tags: ai, best-practice, ciso, cloud, cyersecurity, data-breach, framework, infrastructure, injection, intelligence, mitre, password, risk, risk-management, technology, threat, toolViele Unternehmen haben nicht auf dem Schirm, welche Sicherheitsprobleme durch die Nutzung von GenAI entstehen.Einer Analyse von Netskope zufolge sind GenAI-Daten-Uploads in Unternehmen innerhalb eines Jahres um das 30-Fache gestiegen. Darunter befinden sich demnach auch sensible Informationen wie Quellcodes, regulierte Daten, Passwörter und Schlüssel sowie geistiges Eigentum.Zudem nutzen drei von vier Unternehmen Apps mit integrierten…
-
Security Firms Say Evidence Seems to Confirm Oracle Cloud Hack
Despite Oracle categorically denying that its Cloud systems have been breached, sample data released by the hacker seems to prove otherwise. The post Security Firms Say Evidence Seems to Confirm Oracle Cloud Hack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/security-firms-say-evidence-seems-to-confirm-oracle-cloud-hack/
-
Rising attack exposure, threat sophistication spur interest in detection engineering
Tags: access, ai, attack, automation, banking, ceo, ciso, cloud, compliance, cyber, cybersecurity, data, detection, endpoint, exploit, finance, framework, healthcare, infrastructure, insurance, intelligence, LLM, malware, mitre, network, programming, ransomware, RedTeam, risk, sans, siem, software, supply-chain, tactics, technology, threat, tool, update, vulnerability, zero-dayMore than the usual threat detection practices: Proponents argue that detection engineering differs from traditional threat detection practices in approach, methodology, and integration with the development lifecycle. Threat detection processes are typically more reactive and rely on pre-built rules and signatures from vendors that offer limited customization for the organizations using them. In contrast, detection…
-
After Detecting 30B Phishing Attempts, Microsoft Adds Even More AI to Its Security Copilot
Microsoft is partnering with top firms to launch new AI security tools, boosting breach analysis, threat detection, and AI model protection across cloud platforms. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-ai-agents-security-copilot/
-
There are perhaps 10,000 reasons to doubt Oracle Cloud’s security breach denial
Customers come forward claiming info was swiped from prod First seen on theregister.com Jump to article: www.theregister.com/2025/03/25/oracle_breach_update/
-
Researchers back claim of Oracle Cloud breach despite company’s denials
Security researchers from CloudSEK provided additional evidence supporting a hacker’s claim to have exfiltrated 6 million records. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/researchers-oracle-cloud-breach/743447/
-
ARMO Unveils First Cloud App Detection Response Solution for Seamless CodeCloud Security
Tel Aviv, Israel, March 25th, 2025, CyberNewsWire ARMO CADR minimizes the cloud attack surface, detects and responds to unknown and known cyberattacks while ensuring business continuity, combining the power of CDR and ADR solutions ARMO, the leading Cloud Runtime Security company and the creator of Kubescape, announced today the launch of its Behavioral Cloud Application Detection…
-
Critical vulnerabilities put Kubernetes environments in jeopardy
Wiz researchers warned that several CVEs in Ingress NGINX Controller for Kubernetes make nearly half of all cloud environments at risk of takeover. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/critical-vulnerabilities-kubernetes-jeopardy/743448/
-
Zscaler AI Security-Report: Explosionsartiger Anstieg der KI/ML-Nutzung in Unternehmen
Der jährliche ThreatLabz-Bericht von Zscaler zeigt eine dramatische Zunahme der KI/ML-Nutzung in Unternehmen: Die Anzahl der KI/ML-Transaktionen in der weltgrößten Sicherheits-Cloud ist um mehr als 3.000 Prozent gestiegen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zscaler-ai-security-report-explosionsartiger-anstieg-der-ki-ml-nutzung-in-unternehmen/a40250/
-
KI/ML-Transaktionen steigen immens, aber Sicherheitsbedenken bleiben bestehen
Der jährliche ThreatLabz-Bericht von Zscaler zeigt 36-mal mehr KI/ML-Transaktionen in der weltgrößten Sicherheits-Cloud und unterstreicht die Notwendigkeit von Zero-Trust-Everywhere für eine sichere GenAI-Adoption und zum Stoppen von KI-gestützten Bedrohungen. Der jährliche von Zscaler beruht auf mehr als 536 Milliarden KI-Transaktionen in der Zscaler Zero-Trust-Exchange-Plattform. Die Analyse der Transaktionen in der […] First seen on netzpalaver.de…
-
Harsche Kritik der GI – BSI und Google wollen sichere Cloud-Lösungen entwickeln
First seen on security-insider.de Jump to article: www.security-insider.de/bsi-google-zusammenarbeit-sichere-cloud-loesungen-datensouveraenitaet-a-b473f5000d4b6fc8d01bb56146bdcd9c/
-
Addressing Security Challenges in Cloud-Based Social Networks
SDN offers a flexible, intelligent solution to address these challenges, empowering platforms to optimize performance, allocate resources effectively, enhance security and deliver seamless user experiences. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/addressing-security-challenges-in-cloud-based-social-networks/
-
Rückzug aus der Cloud: Ernüchterung nach der Euphorie
Tags: cloudSo manche Firma ändert derzeit ihre Cloudstrategie, nicht nur wegen Trumps neuer Präsidentschaft. Denn Gründe für den Ausstieg aus der Cloud gibt es viele. First seen on golem.de Jump to article: www.golem.de/news/rueckzug-aus-der-cloud-ernuechterung-nach-der-euphorie-2503-194631.html
-
Cloud Computing auf Nummer Sicher – Gute Wege, die Multicloud abzusichern
First seen on security-insider.de Jump to article: www.security-insider.de/multicloud-umgebung-sicherheit-best-practices-tools-a-c4701f725a245200ed4eb6270fa1ab28/
-
Microsoft launches AI agents to automate cybersecurity amid rising threats
Tags: ai, cloud, cybersecurity, data, governance, identity, intelligence, microsoft, risk, strategy, threat, tool, vulnerabilityIntegration benefits for customers: Microsoft said the six new Security Copilot agents are designed to help security teams autonomously manage high-volume security and IT tasks while integrating smoothly with the broader Microsoft Security portfolio.According to Grover, the move is likely to benefit organizations already embedded in the Microsoft ecosystem, as the platform-centric approach offers advantages…
-
CVE-2025-1974: IngressNightmare Flaws Threaten Kubernetes Clusters
Critical Flaws in Ingress NGINX Controller Enable Remote Code Execution A newly disclosed set of five severe vulnerabilities, dubbed IngressNightmare by cloud security firm Wiz, has put more than 6,500 Kubernetes clusters at risk. These critical flaws impact the Ingress… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2025-1974-ingressnightmare-flaws-threaten-kubernetes-clusters/
-
IngressNightmare: Four Critical Bugs Found in 40% of Cloud Systems
Wiz Security finds four critical RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ingressnightmare-critical-bugs-40/
-
You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?
Just an FYI, like First seen on theregister.com Jump to article: www.theregister.com/2025/03/25/generative_ai_browser_extensions_privacy/
-
AUDITOR: Erste DSGVO-Zertifizierung speziell für Cloud-Dienste
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/auditor-dsgvo-zertifizierung-cloud-dienste
-
Deutschlands Digitale Souveränität adé durch Trump, BSI und Google
Kürzlich wurde eine Kooperation des Bundesamt für Sicherheit in der Informationsverarbeitung (BSI) mit dem US-Anbieter Google zwecke Etablierung einer Cloud-Lösung bekannt. Drei Arbeitskreise der Gesellschaft für Informatik (GI) haben die geplante Kooperation von BSI und Google mit großer Sorge zur … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/25/deutschlands-digitale-souveraenitaet-ade-durch-trump-bsi-und-google/
-
Oracle Cloud Data Breach Claims Repudiated
First seen on scworld.com Jump to article: www.scworld.com/brief/oracle-cloud-data-breach-claims-repudiated
-
Kubernetes Patch: 43% of Clusters Face Remote Takeover Risk
Immediate Patching Urged to Address Flaws in Widely Used Ingress Nginx Controller. Critical vulnerabilities in Ingress Nginx Controller – a widely used component of the popular Kubernetes container management system – need immediate patching to prevent attackers from taking control of cloud-based applications, management interfaces and more, researchers warned. First seen on govinfosecurity.com Jump to…