Tag: cloud
-
CyberFox Purchases Timus to Bring SASE Capabilities to SMBs
CEO David Bellini Says Remote Work Drives Demand for Always-On Secure Connectivity. CyberFox has acquired Tampa, Florida-based SASE startup Timus Networks to help small and midsize businesses replace legacy VPN and firewall appliances with cloud-delivered secure access that protects remote users, supports zero trust initiatives and lowers deployment costs. First seen on govinfosecurity.com Jump to…
-
How Cloud Security Risks Grow With Home-Based Care
As hospital-at-home programs expand and AI adoption accelerates, healthcare organizations face mounting cloud security demands. Anahi Santiago, CISO of ChristianaCare, discusses vendor accountability, identity management, clinical AI risks and the need for stronger cybersecurity foundations. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/how-cloud-security-risks-grow-home-based-care-i-5552
-
‘Djinn’ Stealer Targets Cloud, AI Credentials
The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to wider enterprise systems. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/djinn-stealer-targets-cloud-ai-credentials
-
Amazon Q VS Extension Flaw Leads to Cloud Credential Theft
Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/amazon-q-vs-extension-flaw-leads-cloud-credential-theft
-
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its command channel.Acronis Threat Research Unit found active compromises inside Indian government networks, including machines used by senior administrative staff, and worked with First seen on thehackernews.com Jump…
-
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine throughout 2025.Slovakian cybersecurity company ESET said it observed 35 distinct spear-phishing campaigns mounted by Gamaredon against new targets, with most of them taking place in the second half of the…
-
Schadsoftware Miasma infiziert npm und GitHub Actions
Eine neue Infektionswelle der Miasma-Schadsoftware trifft npm-Pakete und GitHub Actions, um Entwicklerdaten und Cloud-Geheimnisse zu entwenden. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/miasma-npm-und-github-actions
-
Neuer CNAPP-Standard als Basis der Hyper-Priorisierung und autonomen Behebung im Cloud-Maßstab
Tags: cloudFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/neu-cnapp-standard-hyper-priorisierung-autonom-behebung-cloud
-
Amazon Q Developer extension vulnerability could have exposed cloud credentials
First seen on scworld.com Jump to article: www.scworld.com/brief/amazon-q-developer-extension-vulnerability-could-expose-cloud-credentials
-
Cloud Bucket Hijacking Lets Attackers Silently Exfiltrate AWS, Google Cloud Data
A critical cloud storage attack technique that exploits a fundamental architectural vulnerability shared across all major cloud service providers. The technique, dubbed cloud bucket hijacking, allows attackers to silently redirect active data streams, including audit logs, telemetry pipelines, and sensitive objects, to attacker-controlled storage environments with minimal risk of detection. Discovered by security researchers at…
-
Amazon Q Developer Vulnerability Allows Code Execution via Malicious Repositories
A critical security flaw discovered in the Amazon Q Developer Extension for Visual Studio Code (VS Code) left developers vulnerable to arbitrary code execution and cloud credential theft. Tracked as CVE-2026-12957 and CVE-2026-12958, these high-severity vulnerabilities highlight significant risks in how AI coding assistants manage trust boundaries. The root cause of this vulnerability lies in…
-
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer’s cloud credentials. The path was short: a developer opens the repo, trusts the workspace, and Amazon Q does the rest. Amazon has patched it.Tracked as CVE-2026-12957 (CVSS 8.5), the bug sat in how Amazon’s AI coding assistant handled…
-
One-Medical-Angriff zeigt Risiken ungeprüfter Datenbestände bei Cloud-Migrationen
Damit rückt ein Problem in den Fokus, das viele Organisationen unterschätzen: Was passiert mit alten Daten, wenn Unternehmen fusionieren, übernommen werden oder ihre Systeme modernisieren? First seen on infopoint-security.de Jump to article: www.infopoint-security.de/one-medical-angriff-zeigt-risiken-ungepruefter-datenbestaende-bei-cloud-migrationen/a45615/
-
Agentic AI Pentesting Platforms Comparison
Agentic AI transforms Penetration Testing from a periodic consulting practice to a continuous validation discipline. While traditional pentests remain relevant, particularly for complex business logic or regulated environments, the rapid evolution of cloud-native systems necessitates more frequent evaluations. Between formal tests, new services, exposed APIs, identity permissions and misconfigurations can emerge, leaving security teams with…
-
Modelplane: Open-source control plane for AI inference
Organizations that run open-weight models on hardware they own operate GPU fleets spread across clouds, neoclouds, and on-premise data centers. Each fleet handles model … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/26/modelplane-open-source-control-plane-ai-inference/
-
Breach Roundup: How Hackers Exploited a Cisco SD-WAN Flaw
Also, Three Ubiquiti Flaws Under Exploitation. This week, Mandiant detailed a Cisco SD-WAN hack as attackers exploited Ubiquiti flaws. London Hydro disclosed a customer data breach, researchers flagged cross-cloud bucket hijacking risks an INC ransomware leak, Texas and Gravity SMTP incidents. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-how-hackers-exploited-cisco-sd-wan-flaw-a-32080
-
SAP-Systeme im Visier Diese Sicherheitsmaßnahmen sind entscheidend
Die Absicherung von SAP-Landschaften gehört zu den zentralen Herausforderungen für IT- und Security-Teams. Mit der fortschreitenden Transformation in Richtung S/4HANA, Cloud- und Hybridumgebungen steigen die Anforderungen an Cybersecurity, Compliance und operative Resilienz. Vor diesem Hintergrund haben die Onapsis Research Labs ihre SAP-Sicherheitscheckliste für 2026 veröffentlicht. Check 1: Kontinuierliche Sicherheitsbewertungen und Patch-Management Besondere Aufmerksamkeit sollten […]…
-
Aryon Secures $29M to Thwart Cloud Risks Before Deployment
Series A Funds Back Enforcement Controls That Block Insecure Resources Instantly. Aryon Security raised $29 million in Series A funding to help enterprises enforce security policies at cloud deployment, preventing misconfigurations, excessive permissions and insecure resources from reaching production environments across AWS, Azure and Google Cloud. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/aryon-secures-29m-to-thwart-cloud-risks-before-deployment-a-32069
-
Russia’s Gamaredon Adapts Tactics to Target Ukraine
Tags: cloud, data, espionage, infrastructure, malware, phishing, russia, spear-phishing, tactics, ukraineEset Documents New Malware Families and Infrastructure Tactics. Eset found Russia’s FSB-linked Gamaredon expanded its malware toolkit, launched dozens of spear-phishing campaigns, and increasingly relied on legitimate cloud, tunneling and social platforms to conceal C2 infrastructure, exfiltrate data and sustain espionage operations targeting Ukraine. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/russias-gamaredon-adapts-tactics-to-target-ukraine-a-32068
-
Weiterhin Engpässe bei Personal für Cybersecurity Sicherheit bleibt eine der gefragtesten Skills
First seen on security-insider.de Jump to article: www.security-insider.de/cloud-sicherheitskompetenzen-bedarf-waechst-a-4f0090f0904e65ca587dfe5b5b044f21/
-
Top Agentic SOC Vendors Defining Autonomous Security Operations
More than 100 vendors now position themselves as AI SOC platforms, but the category didn’t even exist 18 months ago. The Cloud Security Alliance found that AI-enhanced SOCs investigated cloud security incidents 4561% faster than manual teams, explaining the boom in interest. The vendors truly defining the AI SOC space are the ones The post…
-
Overwhelming support for Microsoft SMS designation in CMA responses
Some 25 organisations back Strategic Market Status for Microsoft’s business software ecosystem, while the Open Cloud Coalition estimates £60m in annual public sector costs First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645005/Overwhelming-support-for-Microsoft-SMS-designation-in-CMA-responses
-
Grafana Confirms TanStack npm Supply Chain Attack Led to GitHub Repository Cloning
Grafana Labs has confirmed that a recent supply chain attack involving the TanStack npm ecosystem resulted in the cloning of its internal GitHub repositories. However, it did not compromise customer production systems or the Grafana Cloud platform. This disclosure follows a thorough internal investigation completed on May 27, 2026, as well as an independent forensic…
-
DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based corporate conglomerate HuiOne Group, as the Treasury unveiled fresh sanctions against nine individuals and 26 entities linked to Prince Group.”These subsidiaries are alleged to have assisted individuals and organizations in transferring proceeds…
-
Multiple Vulnerabilities in QNAP NAS Devices Resolved Through Security Updates
A series of vulnerabilities in QNAP NAS products has prompted security warnings after researchers identified flaws that could allow attackers to execute arbitrary commands, bypass security controls, disclose sensitive information, or disrupt system operations. The issues affect several QNAP platforms, including QTS, QuTS hero, QuTS cloud, and QVP appliances. First seen on thecyberexpress.com Jump to…
-
Caylent pushes agentic AI deeper into MSP cloud operations
First seen on scworld.com Jump to article: www.scworld.com/news/caylent-pushes-agentic-ai-deeper-into-msp-cloud-operations
-
Feds seize alleged cyber-scam infrastructure connected to Southeast Asian company
The Department of Justice announced the “seizure of a cloud computing account” used by subsidiaries of the Huione Group, a conglomerate severed from the U.S. financial system last year. First seen on therecord.media Jump to article: therecord.media/feds-seize-alleged-cyber-scam-infrastructure-southeast-asia
-
Iomart wraps up year of transition
Channel player shares full-year results as the business moves to concentrate on hybrid cloud and security First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366644923/Iomart-wraps-up-year-of-transition
-
Zero-Trust-SASE für das KI-Zeitalter
Zscaler erweitert die Zscaler-Zero-Trust-SASE-Lösung mit der Einführung des <>. Diese Neuerung ist darauf ausgelegt, die gesamte Kommunikation vom Browser bis hin zu den Workloads auf einer einzigen Cloud-nativen Architektur zu sichern. Arbeitsprozesse finden heute zunehmend auf nicht verwalteten Geräten und über Lieferketten hinweg statt und KI-gesteuerte Angriffe verbreiten sich schneller, als sie abgewehrt werden […]…
-
Zscaler erweitert Zero Trust SASE mit neuem ZAgent-Framework für agentenbasierte Verwaltung
Für Unternehmen, die KI-Initiativen ausbauen, Multi-Cloud-Umgebungen betreiben oder ihre Lieferketten enger digital vernetzen, könnte dieser Ansatz ein wichtiger Baustein sein. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zscaler-erweitert-zero-trust-sase-mit-neuem-zagent-framework-fuer-agentenbasierte-verwaltung/a45575/