Cloud Security
Microsoft addressed two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) leading to unauthorized access to user sessions.
Hi, what are you looking for?
SecurityWeek
Cloud Security
Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments.
Cloud Security
CISA’s Binding Operational Directive 25-01 requires federal agencies to align cloud environments with SCuBA secure configuration baselines.
Cloud Security
Researchers warn about critical vulnerabilities in Ruijie Networks’ Reyee cloud management platform and Reyee OS network devices.
Cloud Security
Veeam releases patches for two vulnerabilities in Service Provider Console, including a critical-severity remote code execution bug.
Cloud Security
AWS and other vendors have announced new cloud security products and features at the cloud giant’s re:Invent 2024 conference.
Cloud Security
AWS has launched Security Incident Response, a new service for quick and efficient security event management.
Cloud Security
Google Cloud is offering up to $1 million in financial protection to cover expenses associated with undetected cryptomining attacks.
Cloud Security
Sysdig is launching what it claims to be the first CNAPP with end-to-end detection and response, consolidating CNAPP and CDR.
Cloud Security
Salesforce ghost sites — domains that are no longer maintained but still accessible — can expose personal information and business data.
Cloud Security
Google makes ACME API available to all Google Cloud users to allow them to automatically acquire and renew TLS certificates for free.
Cloud Security
GAO report underlines the need for federal agencies to fully implement key cloud security practices.
Cloud Security
Tech giant IBM acquires Polar Security, an early stage startup in the red-hot data security posture management (DSPM) category.
Cloud Security
Google announces the general availability of ‘rules_oci’ Bazel plugin to improve the security of container images.
Cloud Security
Three vulnerabilities in the Azure API Management service could be exploited for internal asset access, DoS, firewall bypass, and the upload of malicious files.
Cloud Security
Aqua Security found over 250 million artifacts and more than 65,000 container images in misconfigured registries.
Cloud Security
Silicon Valley startup emerges from stealth with $4 million in seed-stage funding and ambitious plans to disrupt the IAM governance market.
Cloud Security
Threat actors have been observed abusing Kubernetes RBAC to create backdoors and hijack cluster resources for cryptocurrency mining.
Data Breaches
In 2024 organizations informed the US government about 585 healthcare data breaches affecting a total of nearly 180 million user records.
Vulnerabilities
Malware & Threats
Malware & Threats
Application Security
Cisco has unveiled AI Defense, a solution designed to help organizations protect development and use of AI applications.
Malware & Threats
Cybersecurity Funding
Malware & Threats
