Cloud Security Google Cloud Rolling Out Mandatory MFA for All Users Starting this month, Google Cloud will be rolling out mandatory MFA for all users who sign in with a password. Ionut ArghireNovember 6, 2024
Cloud Security Honeypot Surprise: Researchers Catch Attackers Exposing 15,000 Stolen Credentials in S3 Bucket Sysdig researchers trace a bizarre S3 bucket misconfiguration to EmeraldWhale, exposing 1.5 terabytes of stolen credentials and script. Kevin TownsendOctober 31, 2024
Cloud Security Big Rewards Offered in Dedicated Google Cloud Bug Bounty Program More than 460 products and services are covered under Google Cloud’s new VRP, with 140 eligible for top tier bug bounty rewards. Ionut ArghireOctober 21, 2024
Cloud Security Microsoft Patches Vulnerabilities in Power Platform, Imagine Cup Site Microsoft has patched ‘critical’ privilege escalation and information disclosure vulnerabilities in Power Platform, Dataverse and the Imagine Cup website. Eduard KovacsOctober 16, 2024
Cloud Security New CounterSEVeillance and TDXDown Attacks Target AMD and Intel TEEs Intel and AMD respond to new attack methods named TDXDown and CounterSEVeillance that can be used against TDX and SEV technology. Eduard KovacsOctober 15, 2024
Cloud Security Google Cloud Announces General Availability of New Confidential Computing Options Google Cloud makes new confidential computing options generally available and expands attestation support. Ionut ArghireOctober 4, 2024
Cloud Security Cracking the Cloud: The Persistent Threat of Credential-Based Attacks Credentials are still the most common entry point for bad actors, even as businesses deploy multi-factor authentication (MFA) to strengthen defenses. Kevin TownsendOctober 1, 2024
Cloud Security Microsoft: Cloud Environments of US Organizations Targeted in Ransomware Attacks A threat actor has been compromising the hybrid cloud environments of US organizations in multiple sectors. Ionut ArghireSeptember 30, 2024
Artificial Intelligence Critical Nvidia Security Flaw Exposes Cloud AI Systems to Host Takeover Nvidia confirms risk of code execution, denial of service, escalation of privileges, information disclosure, and data tampering. CVSS 9/10. Ryan NaraineSeptember 26, 2024
Cloud Security Tamnoon Raises $12 Million for Cloud Security Remediation Service Tamnoon has raised $12 million in Series A funding for its Managed Cloud Security Remediation service. Eduard KovacsSeptember 25, 2024
Cloud Security Dependency Confusion Could Have Led to RCE in Google Cloud Platform Tenable shares details on a dependency confusion attack that led to the execution of code on Google’s internal servers. Ionut ArghireSeptember 17, 2024
Cloud Security P0 Security Banks $15M for Security Cloud Access San Francisco secure cloud access startup gets backing from SYN Ventures, Zscaler, and Lightspeed Venture Partners. SecurityWeek NewsSeptember 10, 2024