Tag: cloud
-
Massive Oracle Cloud Breach: 6M Records Exposed, 140k+ Tenants Risked
Oracle Cloud breach exposed 6M records from 140k+ tenants. Learn how attackers exploited vulnerabilities and steps organizations must take to secure data. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/trends/oracle-cloud-breach-6m-records-140k-tenants-risk/
-
Oracle Denies Claim of Oracle Cloud Breach of 6M Records
A threat actor posted data on Breachforums from an alleged supply-chain attack that affected more than 140K tenants, claiming to have compromised the cloud via a zero-day flaw in WebLogic, researchers say. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/oracle-denies-claim-oracle-cloud-breach-6m-records
-
Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks
Acronis Threat Research found 2M+ malicious URLs & 5,000+ malware instances in Microsoft 365 backup data”, demonstrating how built-in security isn’t always enough. Don’t let threats persist in your cloud data. Strengthen your defenses. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hidden-threats-how-microsoft-365-backups-store-risks-for-future-attacks/
-
Oracle Denies Cloud Breach After Hacker Offers to Sell Data
Oracle has denied that Cloud systems have been breached after a hacker claimed to have stolen millions of records. The post Oracle Denies Cloud Breach After Hacker Offers to Sell Data appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/oracle-denies-cloud-breach-after-hacker-offers-to-sell-data/
-
Oracle Cloud breach may impact 140,000 enterprise customers
Tags: access, attack, authentication, breach, business, cloud, control, credentials, data, extortion, finance, hacker, mfa, mitigation, oracle, password, radius, ransom, risk, security-incident, service, strategy, supply-chain, threatBusiness impact and risks: In an alarming development, the threat actor has initiated an extortion campaign, contacting affected companies and demanding payment to remove their data from the stolen cache. This creates immediate financial pressure and complex legal and ethical decisions for victims regarding ransom payments.To increase pressure on both Oracle and affected organizations, the…
-
AWS und das BSI kooperieren für mehr Cloud-Sicherheit
Das Bundesamt für Sicherheit in der Informationstechnik (BSI) und Amazon Web Services (AWS) haben eine Kooperationsvereinbarung geschlossen. Ziel ist die Entwicklung und Anpassung von Standards und Validierungsprozessen an Cloud-Umgebungen, die traditionell für Onpremises-Systeme konzipiert wurden. Gemeinsam soll ein Umfeld geschaffen werden, das die Sicherheit digitaler Infrastrukturen erhöht und gleichzeitig den technologischen Fortschritt unterstützt. Die wichtigsten…
-
CISOs are taking on ever more responsibilities and functional roles has it gone too far?
Tags: ai, business, cio, ciso, cloud, compliance, computing, control, corporate, cyber, cybersecurity, data, defense, framework, fraud, governance, healthcare, infosec, intelligence, international, Internet, jobs, law, mitigation, nist, privacy, regulation, resilience, risk, risk-management, service, skills, software, supply-chain, technology, threatth century alongside technology and internet-enabled threats, morphing to meet the demands of the moment. But the position hasn’t just matured; in many cases it has expanded, taking on additional domains.”The CISO role has expanded significantly over the years as companies realize that information security has a unique picture of what is going on across…
-
Trump’s Aggression Sours Europe on US Cloud Giants
Companies in the EU are starting to look for ways to ditch Amazon, Google, and Microsoft cloud services amid fears of rising security risks from the US. But cutting ties won’t be easy. First seen on wired.com Jump to article: www.wired.com/story/trump-us-cloud-services-europe/
-
China’s Baidu Compromised in Data Leak, Affecting Users
Chinese tech giant Baidu has faced severe scrutiny after allegations emerged that a top executive’s teenage daughter had accessed and shared personal details of internet users online. The incident has raised significant concerns about data privacy and security at one of China’s largest cloud providers. The controversy began when online users accused the teenage daughter…
-
Cloud providers aren’t delivering on security promises
Security concerns around cloud environments has prompted 44% of CISOs to change cloud service provider, according to Arctic Wolf. This is being driven by the fact that 24% … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/24/cloud-environments-security-concerns/
-
How do I streamline NHI onboarding in identity management systems?
Are you effectively managing Non-Human Identities in your organization? In the quest to navigate the cloud’s labyrinthine complexities, one aspect often overlooked is the management of Non-Human Identities (NHIs). NHIs, the machine identities that play a crucial role in cybersecurity, are increasingly fundamental in the digital ecosystem. The management of these entities not only secures……
-
Oracle Cloud says it’s not true someone broke into its login servers and stole data
Despite evidence to the contrary as alleged pilfered info goes on sale First seen on theregister.com Jump to article: www.theregister.com/2025/03/23/oracle_cloud_customers_keys_credentials/
-
Oracle Denies Breach Amid Hacker’s Claim of Access to 6 Million Records
Oracle denies breach claims as hacker alleges access to 6 million cloud records. CloudSEK reports a potential zero-day exploit affecting 140,000 tenants. First seen on hackread.com Jump to article: hackread.com/oracle-denies-breach-hacker-access-6-million-records/
-
Oracle Cloud SSO, LDAP Records Dumped, 140k+ Tenants Affected
On March 21, security threat intel vendor CloudSEK published a report on a forum post from a threat actor claiming to have exfiltrated around 6 First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2025/03/21/oracle-cloud-sso-ldap-records-dumped-140k-tenants-affected/
-
How Google-Wiz Deal Counters Microsoft Defender’s Dominance
Google Aims to Match Microsoft Defender With $32B Buy of Wiz’s Cloud Security Tech. Google’s plan to buy cloud security firm Wiz for $32 billion highlights its drive to compete with Microsoft Defender and expand multi-cloud protection, and will put pressure on AWS to respond. Forrester Analyst Andras Cser says Wiz will likely remain independent…
-
A Peek on Cloud Security: JSSI 2025
At JSSI 2025, French IT security experts discussed the cloud’s impact on security. Presentations covered strategy and technical analysis. GitGuardian’s researchers shared insights on detecting secrets in the cloud and responsibly disclosing them to companies. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/a-peek-on-cloud-security-jssi-2025/
-
Oracle denies breach after hacker claims theft of 6 million data records
Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company’s Oracle Cloud federated SSO login servers First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-denies-data-breach-after-hacker-claims-theft-of-6-million-data-records/
-
Wiz Product, Channel Strategy Led To $32B Google Acquisition Deal: Partner CEO
Wiz adopted the channel ‘early on’ and continually made smart investments into its cloud and AI security platform, according to the CEO of system integrator Evotek. First seen on crn.com Jump to article: www.crn.com/news/security/2025/wiz-product-channel-strategy-led-to-32b-google-acquisition-deal-partner-ceo
-
What Google’s $32B Wiz Buy Means for Cloud Security and the Channel
First seen on scworld.com Jump to article: www.scworld.com/analysis/what-googles-32b-wiz-buy-means-for-cloud-security-and-the-channel
-
ISMG Editors: Impact of Google’s $32B Buy on Cloud Security
Also: Trump’s Cybersecurity Shake-Up, IBM’s X-Force Event Highlights. In this week’s update, ISMG editors explore Google’s record-breaking $32B Wiz acquisition and its impact on cloud security, the shake-up in Trump’s cybersecurity leadership team amid budget cuts, and key takeaways from the IBM X-Force Cyber Range cyber response event. First seen on govinfosecurity.com Jump to article:…
-
Für Cyberattacken gewappnet Krisenkommunikation nach Plan
Lesen Sie, welche Aspekte für einen Krisenkommunikationsplan entscheidend sind.Cyberangriffe fordern nicht nur CISOs in punkto Prävention und Krisenbewältigung heraus. Auch die Unternehmenskommunikation ist mit im Boot. Sie ist verantwortlich für den Krisenkommunikationsplan, den sie mit dem CISO entwickelt und bei Cybersicherheitsvorfällen umsetzt.Eine gute Krisenprävention hat aus der Perspektive der Kommunikation drei Elemente und beginnt nicht…
-
CISA marks NAKIVO’s critical backup vulnerability as actively exploited
Tags: access, advisory, backup, cisa, ciso, cloud, cybersecurity, exploit, kev, mitigation, network, service, update, vulnerabilityCISOs advised to push for immediate patching: CISA has advised immediate federal and civilian patching of the flaw. For the Federal Civilian Executive Branch (FCEB) agencies, the US cybersecurity watchdog has stipulated a patching deadline of April 19, 2025, in accordance with the BOD 22-01 directive.”Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance…
-
US-Clouds: Erste Warnungen vor Gefährdung der Datensouveränität in Europa
Tags: cloudFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/us-clouds-warnungen-gefaehrdung-datensouveraenitaet-europa
-
Industry Reactions to Google Buying Wiz: Feedback Friday
Industry professionals comment on Google acquiring cloud security giant Wiz for $32 billion in cash. The post Industry Reactions to Google Buying Wiz: Feedback Friday appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/industry-reactions-to-google-buying-wiz-feedback-friday/
-
11 hottest IT security certs for higher pay today
Tags: access, attack, automation, business, cloud, container, control, corporate, credentials, cyber, cybersecurity, data, defense, encryption, exploit, finance, fortinet, google, governance, incident response, infosec, intelligence, Internet, jobs, linux, malicious, malware, monitoring, network, penetration-testing, remote-code-execution, resilience, reverse-engineering, risk, risk-assessment, risk-management, skills, software, technology, threat, tool, training, vulnerability, windowsOffensive Security Certified Expert (OSCE): OffSec’s Offensive Security Certified Expert consists of three courses: Advanced Web Attacks and Exploitation, Advanced Evasion Techniques and Breaching Defenses, and Windows User Mode Exploit Development. The format for each course exam is the same: Candidates have 48 hours to compromise a given target using various techniques. No formal prerequisites exist for any of the…
-
Choosing the Right Cloud Security Provider: Five Non-Negotiables for Protecting Your Cloud
Tags: attack, business, cloud, control, corporate, data, infrastructure, intelligence, jobs, risk, service, strategy, technology, threat, vulnerabilityProtecting your cloud environment for the long term involves choosing a security partner whose priorities align with your needs. Here’s what you need to know. As organizations embrace multi-cloud and hybrid environments, the complexity of securing that landscape increases. However, the overlooked risks may not come solely from threat actors. Choosing a security provider that…
-
It looks like IBM is cutting jobs again, with Classic Cloud hit hard
We’re told thousands may soon get a pink slip from Big Blue First seen on theregister.com Jump to article: www.theregister.com/2025/03/20/ibm_cuts_us_jobs/