Tag: cloud
-
Cloud-Migration und Identity Security: Digitale Transformation, Benutzerfreundlichkeit und Sicherheit sind vereinbar
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/cloud-migration-identity-security-digitale-transformation-benutzerfreundlichkeit-sicherheit-vereinbarkeit
-
What roles do Agentic AI play in innovation?
How Secure Are Your Non-Human Identities in Cloud Environments? Are your organization’s digital assets as secure as they could be? Ensuring the security of Non-Human Identities (NHIs) has become an essential focus for cybersecurity professionals. Organizations operating across diverse industries like finance, healthcare, travel, and technology rely heavily on machine identities to automate business processes….…
-
ZombieAgent ChatGPT attack shows persistent data leak risks of AI agents
Worm-like propagation: The email attack even has worming capabilities, as the malicious prompts could instruct ChatGPT to scan the inbox, extract addresses from other email messages, exfiltrate those addresses to the attackers using the URL trick, and send similar poisoned messages to those addresses as well.If the victim is the employee of an organization that…
-
ISMG Editors: Lack of MFA Keeps Fueling Cloud Data Breaches
Also: Turning AI Data Into AI Defense, Autonomous Border Patrol Robots. In this week’s panel, four ISMG editors discussed how basic security failures are still opening the door to major breaches, how researchers are rethinking data protection in the age of AI and the implications of robots with artificial intelligence patrolling national borders. First seen…
-
Agentic AI requires rethink of cloud security strategy
Security leaders discuss the rise of agentic AI, warning that autonomous agents operating at machine speed will require organisations to move away from static protection towards behavioural monitoring and automated reasoning First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366637022/Agentic-AI-requires-rethink-of-cloud-security-strategy
-
CrowdStrike Acquires Identity Security Startup SGNL in $740 Million Deal
CrowdStrike has announced its agreement to acquire SGNL, a leading identity-first security company, for $740 million. The acquisition will strengthen CrowdStrike Falcon® Next-Gen Identity Security by adding continuous, context-aware authorization capabilities across human, non-human, and AI agent identities in cloud environments. Why This Acquisition Matters The identity attack surface has expanded rapidly due to cloud…
-
QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies
State-backed attackers are using QR codes to slip past enterprise security and help themselves to cloud logins, the FBI says First seen on theregister.com Jump to article: www.theregister.com/2026/01/09/pyongyangs_cyberspies_are_turning_qr/
-
CrowdStrike to Buy SGNL to Expand Identity Security Capabilities
The CrowdStrike-SGNL deal underscores how identity security has become a critical component of enterprise cybersecurity as companies add cloud services and deploy AI-driven tools. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/crowdsrike-buy-sgnl-expand-identity-security-capabilities
-
Ni8mare: Kritische n8n-Lücke bedroht 100.000 Server
Tags: access, api, bug, cloud, cve, cvss, cyberattack, google, open-source, rce, remote-code-execution, update, vulnerabilityn8n-Anwender sollten ihre Systeme dringend patchen. Forscher warnen vor einer schwerwiegenden Sicherheitslücke. Forscher des Security-Anbieters Cyera haben eine schwerwiegende Schwachstelle in der Workflow-Automatisierungsplattform n8n entdeckt. Sie ermöglicht es Angreifern, beliebigen Code auszuführen. Auf diese Weise könnten sie die vollständige Kontrolle über die betroffene Umgebung übernehmen, so die Experten. Laut Forschungsbericht sind davon 100.000 Server betroffen.…
-
Check Point und NVIDIA sorgen für Schutz der gesamten KI-Lieferkette
Die Kombination aus AI Cloud Protect, CloudGuard WAF und GenAI Protect sorgt dafür, dass Unternehmen ihre KI-Umgebungen umfassend absichern können von der Infrastruktur über die Anwendungen bis zu den Endnutzern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-und-nvidia-sorgen-fuer-schutz-der-gesamten-ki-lieferkette/a43302/
-
How AI agents are turning security inside-out
AppSec teams have spent the last decade hardening externally facing applications, API security, software supply chain risk, CI/CD controls, and cloud-native attack paths. But … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/09/ai-agents-appsec-risk/
-
Security teams are paying more attention to the energy cost of detection
Security teams spend a lot of time explaining why detection systems need more compute. Cloud bills rise, models retrain more often, and new analytics pipelines get added to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/09/energy-aware-cybersecurity-ai-research/
-
Microsoft Mandates MFA for Microsoft 365 Admin Center Access
Microsoft is tightening security for its cloud customers by makingmulti-factor authenticationmandatory for anyone accessing the Microsoft 365 admin center, effectively ending password-only logins forhigh-privilegeadmin portals. The enforcement will fully kick in on February 9, 2026, following a phased rollout that began in early 2025. Deadline and enforcement scope Under the new policy, admin users who…
-
Enterprises still aren’t getting IAM right
Tags: access, ai, api, authentication, automation, cloud, control, credentials, cybersecurity, data, email, governance, iam, identity, incident response, infrastructure, least-privilege, password, risk, saas, service, toolJust 1% have fully implemented a modern just-in-time (JIT) privileged access model;91% say at least half of their privileged access is always-on (standard privilege), providing unrestricted, persistent access to sensitive systems;45% apply the same privileged access controls to human and AI identities;33% lack clear AI access policies.The research also revealed a growing issue with “shadow…
-
Can Agentic AI be trusted with sensitive data?
Are Non-Human Identities the Key to Securing Sensitive Data in the Cloud? How can organizations ensure that their sensitive data is secure when leveraging Agentic AI? This question is at the forefront of discussions among cybersecurity professionals and organizations across industries. Non-Human Identities (NHIs) play a pivotal role in addressing this concern by securing machine……
-
How does Agentic AI adapt to changing security needs?
How Can Organizations Safeguard Machine Identities in the Cloud? Have you ever wondered how machine identities, also known as Non-Human Identities (NHIs), affect the security of your cloud-based operations? Understanding and managing these machine identities is crucial to enhancing the security posture of any organization operating in the cloud. Understanding Non-Human Identities and Their Role……
-
Here’s What Cloud Security’s Future Holds for the Year Ahead
Here are the top cloud security trends I’m seeing in my crystal ball for the New Year, particularly arming us for AI adoption. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/heres-cloud-security-holds-year-ahead
-
CrowdStrike to buy identity startup SGNL for nearly $740M
CrowdStrike is buying identity management startup SGNL, a move that underscores how identity security has become a central battleground in enterprise cybersecurity as companies add cloud services and deploy AI-driven tools. The cybersecurity firm did not disclose financial terms in a Thursday announcement, but CrowdStrike CEO George Kurtz told CNBC the deal is valued at…
-
Creating a Safe Learning Environment in K-12 Schools Without Adding Complexity
Today’s K12 schools operate in a far more complex landscape than ever before. A safe learning environment surpasses classroom walls or school hallways. Learning now extends into digital platforms, cloud-based tools, and connected devices that students use daily. As a result, school safety must evolve to protect students academically, emotionally, psychologically, and online. Safety and…
-
JumpCloud Grows Presence in Brazil With MSP MacSolution Buy
Acquisition of MSP MacSolution Boosts Global Services and Cloud Migration Expertise. JumpCloud has acquired MacSolution, a longtime partner and its largest MSP in the Americas, to enhance global service delivery and deepen its IT modernization capabilities. The move positions Sao Paulo, Brazil, as a strategic hub and strengthens support for partners and customers in Latin…
-
Deutschland bleibt Skeptiker in puncto Cloud-Speicher
Strato hat in einer repräsentativen Forsa-Studie die Nutzung von Cloud-Speichern in Deutschland, den Niederlanden und Schweden untersucht. Die Ergebnisse zeigen ein differenziertes Bild: Cloud-Speicher werden in Deutschland im Vergleich zu den europäischen Nachbarländern seltener genutzt, was einhergeht mit einem subjektiv geringeren Sicherheitsgefühl. Gleichzeitig sind die Erwartungen an KI-gestützte Sicherheitsfunktionen hierzulande besonders hoch. Cloud-Nutzung und Sicherheitsgefühl:…
-
Check Point sichert KI-Fabriken mit Nvidia
Check Point Software Technologies sichert AI-Factories mit Nvidia ab: Check-Point-AI-Cloud-Protect ist nun Teil des Nvidia-Enterprise-AI-Factory-Validated-Designs und bietet Echtzeit-Netzwerk- und Host-Sicherheit für Enterprise-AI-Deployments, ohne die Performance der KI-Systeme negativ zu beeinflussen. Das Wichtigste in Kürze: Zunehmendes Risiko: Laut Gartner waren 32 Prozent der Organisationen bereits von KI-Angriffen durch Prompt-Manipulation betroffen, 29 Prozent meldeten Angriffe auf ihre…
-
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories
The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere.This week’s stories show how fast attackers change their tricks, how small mistakes turn into big risks, and how the same old tools keep finding new ways to break in.Read on to catch up before the next wave hits. Honeypot…
-
NIS2-Umsetzung: Neues BSI-Portal geht an den Start
Tags: bsi, ceo, cloud, cyber, gartner, infrastructure, linkedin, nis-2, resilience, risk-analysis, risk-management, service, vulnerabilityUnternehmen können sich ab sofort über das neue BSI-Portal als NIS2-Einrichtung registrieren und IT-Sicherheitsvorfälle melden.Seit Anfang Dezember gilt die EU-Sicherheitsrichtline NIS2 auch in Deutschland. Rund 29.500 Unternehmen sind dadurch verpflichtet, sich als NIS-2-Einrichtungen zu registrieren und dem Bundesamt für Sicherheit in der Informationstechnik (BSI) erhebliche Sicherheitsvorfälle zu melden. Vor diesem Hintergrund hat das BSI ein…
-
Wasabi Covert Copy – Unsichtbare Backups für ‘Hot Cloud Storage”
First seen on security-insider.de Jump to article: www.security-insider.de/unsichtbare-backups-fuer-hot-cloud-storage-a-df8115fa72bd118d617eddcfb300b784/
-
Dringend MFA aktivieren: Massenhaft Daten aus Cloud-Instanzen abgeflossen
Betroffen sind self-hosted Instanzen von Owncloud, Nextcloud und Sharefile. Daten von 50 Organisationen stehen zum Verkauf, weil die MFA nicht aktiv war. First seen on golem.de Jump to article: www.golem.de/news/dringend-mfa-aktivieren-massenhaft-daten-aus-cloud-instanzen-abgeflossen-2601-203932.html
-
Orca, Wiz End Dueling Lawsuits Over Cloud Security Patents
Tags: cloudPatent Board Decision Invalidating 3 Orca Patents Weakens Case, Leads to Dismissal. After 30 months of legal sparring, Wiz and Orca Security have agreed to dismiss all claims in their cloud security patent dispute. The end of the case comes after a significant setback for Orca: A federal board invalidated three of its asserted patents.…
-
Critical n8n Vulnerability Allows Authenticated Remote Code Execution
A critical security vulnerability has been discovered in n8n, the popular workflow automation tool, potentially allowing authenticated attackers to execute arbitrary code on the host server. Identified as CVE-2026-21877, this high-severity vulnerability affects both self-hosted and n8n Cloud instances, posing a significant risk to organizations relying on the platform for business process automation. The vulnerability has…
-
Threat Actors Exploit Google Cloud Services to Steal Microsoft 365 Credentials
Tags: cloud, credentials, cyber, cybersecurity, email, exploit, google, infrastructure, malicious, microsoft, phishing, service, threatA sophisticated phishing campaign is exploiting Google Cloud infrastructure to bypass email security filters and steal Microsoft 365 credentials, demonstrating how attackers increasingly abuse trusted cloud platforms to lend legitimacy to their malicious activities. Cybersecurity researchers at Check Point have uncovered a large-scale operation targeting approximately 3,200 organizations, resulting in over 9,300 phishing emails over…