Tag: cloud
-
Google Cloud Document AI Vuln Could Lead to Data Exfil
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/google-cloud-document-ai-vuln-could-lead-to-data-exfil
-
Don’t Forget Mobile Security: How Mobile Devices Serve as Keys to the Cloud
First seen on scmagazine.com Jump to article: www.scmagazine.com/native/dont-forget-mobile-security-how-mobile-devices-serve-as-keys-to-the-cloud
-
USENIX NSDI ’24 Making Kernel Bypass Practical for the Cloud with Junction
Tags: cloudAuthors/Presenters:Joshua Fried, Gohar Irfan Chaudhry, Enrique Saurez, Esha Choukse, Ãñigo Goiri, Sameh Elnikety, Rodrigo Fonseca, Adam Belay Our si… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/usenix-nsdi-24-making-kernel-bypass-practical-for-the-cloud-with-junction/
-
Fortinet Admits Miscreant Got Hold Of Customer Data In The Cloud
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36334/Fortinet-Admits-Miscreant-Got-Hold-Of-Customer-Data-In-The-Cloud.html
-
AT&T to Pay $13 Million in Settlement Over 2023 Data Breach
ATT has agreed to pay $13 million in a settlement with the FCC over a 2023 data breach at a third-party vendor’s cloud environment. The post ATT to Pa… First seen on securityweek.com Jump to article: www.securityweek.com/att-to-pay-13-million-in-settlement-over-2023-data-breach/
-
Pulumi Adds Cloud Security Intelligence Tool to Portfolio
Pulumi today added a Pulumi Insights application for discovering cloud assets in addition to generally making available a previously launched tool for… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/pulumi-adds-cloud-security-intelligence-tool-to-portfolio/
-
PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190)
CVE-2024-8190, an OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) v4.6, is under active exploitation. Details about the at… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/17/cve-2024-8190/
-
Intezer’s $33M Series C Funding to Fuel AI, Customer Support
Norwest Money Fuels Integration of Cloud Defense Tools, Autonomous Alert Management. Norwest Venture Partners led a $33 million Series C round to acce… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/intezers-33m-series-c-funding-to-fuel-ai-customer-support-a-26306
-
VMware vCenter Server Vulnerability Let Attackers Escalate Privileges
VMware has issued a critical security advisory (VMSA-2024-0019) addressing two significant vulnerabilities in its vCenter Server and VMware Cloud Foun… First seen on gbhackers.com Jump to article: gbhackers.com/vmware-vcenter-server-vulnerability-2/
-
Cloud Access Security Broker Policy
The rise in cloud adoption has made it imperative for more businesses to rely on cloud providers to store, access, and manage their data and applicati… First seen on techrepublic.com Jump to article: www.techrepublic.com/resource-library/toolstemplates/cloud-access-security-broker-policy/
-
Eperi-Umfrage deckt auf, dass große Unternehmen ihren Encryption-Key vielfach mit ihrem Cloud-Anbieter teilen, während kleine Unternehmen dies ablehnen
Sollten die Schlüssel, mit denen Unternehmen ihre sensiblen Daten verschlüsseln, zusätzlich zur Speicherung im Unternehmen auch dem Cloud-Provider zur… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/09/11/eperi-umfrage-deckt-auf-dass-grosse-unternehmen-ihren-encryption-key-vielfach-mit-ihrem-cloud-anbieter-teilen-waehrend-kleine-unternehmen-dies-ablehnen/
-
Creating An AI Honeypot To Engage With Attackers Sophisticatedly
Honeypots, decoy systems, detect and analyze malicious activity by coming in various forms and can be deployed on cloud platforms to provide insights … First seen on gbhackers.com Jump to article: gbhackers.com/ai-honeypot-engagement/
-
Google Cloud Strengthens Backup Service With Untouchable Vaults
The backup and data recovery service adds an extra layer of protection in case a business encounters an attack or another major problem with Google Cl… First seen on techrepublic.com Jump to article: www.techrepublic.com/article/google-cloud-vault-backup/
-
Dependency Confusion Could Have Led to RCE in Google Cloud Platform
Tenable shares details on a dependency confusion attack that led to the execution of code on Google’s internal servers. The post Dependency Confusion … First seen on securityweek.com Jump to article: www.securityweek.com/dependency-confusion-could-have-led-to-rce-in-google-cloud-platform/
-
Avoiding The >>No Responsibility<< Cloud Security Model
Tags: cloudWe’re all familiar with the shared responsibility model championed by cloud providers like AWS, Azure, and GCP: platform providers secure the cloud in… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/avoiding-the-no-responsibility-cloud-security-model/
-
USENIX NSDI ’24 Horus: Granular In-Network Task Scheduler for Cloud Datacenters
Authors/Presenters:Parham Yassini, Khaled Diab, Saeed Zangeneh, Mohamed Hefeeda Our sincere thanks to USENIX, and the Presenters & Authors for pub… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/usenix-nsdi-24-horus-granular-in-network-task-scheduler-for-cloud-datacenters/
-
Scattered Spider Targets the Cloud: A Growing Threat to the Insurance and Financial Sectors
A new wave of ransomware attacks targeting cloud infrastructures has put the insurance and financial industries on high alert. According to a recent r… First seen on securityonline.info Jump to article: securityonline.info/scattered-spider-targets-the-cloud-a-growing-threat-to-the-insurance-and-financial-sectors/
-
CloudImposer RCE Vulnerability Targets Google Cloud Platform
Attackers Could Exploit Flaw to Run Malicious Code on Google’ s, Customers’ Servers. Google patched a critical remote execution vulnerability in its c… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cloudimposer-rce-vulnerability-targets-google-cloud-platform-a-26299
-
VMware patches over remote makeroot holes in vCenter Server, Cloud Foundation
First seen on theregister.com Jump to article: www.theregister.com/2024/09/17/vmware_vcenter_patch/
-
18.09.2024: Web-Seminar zu IT-Sicherheitsstrategien für cloud-basierte und hybride Geschäftsprozesse
Tags: cloudFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/18-09-2024-web-seminar-it-sicherheitsstrategien-cloud-basis-hybrid-geschaeftsprozesse
-
Microsoft Entra Permissions Management verstehen und nutzen – Identitäts- und Zugriffsverwaltung in MultiUmgebungen
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-entra-multi-cloud-berechtigungsverwaltung-a-54e702901d0c493ab632a8a116e6b098/
-
U.S. CISA adds Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities… First seen on securityaffairs.com Jump to article: securityaffairs.com/168398/hacking/u-s-cisa-adds-ivanti-csa-vulnerability-to-its-known-exploited-vulnerabilities-catalog.html
-
Ivanti Cloud Service Appliance flaw is being actively exploited in the wild
Ivanti warned that recently patched flaw CVE-2024-8190 in Cloud Service Appliance (CSA) is being actively exploited in the wild. Ivanti warned that a … First seen on securityaffairs.com Jump to article: securityaffairs.com/168388/hacking/ivanti-csa-cve-2024-8190.html
-
CISOs müssen ihre Cloud Neue Herausforderungen für Disaster Recovery und Datenschutz
First seen on security-insider.de Jump to article: www.security-insider.de/unternehmen-cloud-ki-sicherheitsluecken-disaster-recovery-a-a3cbb51b16c64bec6fc02cfeba790666/
-
Organizations still don’t know how to handle non-human identities
Organizations are grappling with their current NHI (non-human identities) security strategies, according to Cloud Security Alliance and Astrix Securit… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/13/nhis-security-challenges/
-
Uniting the brightest minds in security, network and cloud
First seen on theregister.com Jump to article: www.theregister.com/2024/08/23/uniting_the_brightest_minds_in/
-
CVE-2024-8190: Investigating CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability
On September 10, 2024, Ivanti released a security advisory for a command injection vulnerability for it’s Cloud Service Appliance (CSA) product. Initi… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/cve-2024-8190-investigating-cisa-kev-ivanti-cloud-service-appliance-command-injection-vulnerability/
-
Ivanti Vulnerability Again Forces Emergency Patches
Cloud Service Appliance Admin Panels Exposed a Pathway to the Internet for Hackers. Customers of internet appliance maker Ivanti face yet another hack… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ivanti-vulnerability-again-forces-emergency-patches-a-26295