Cloud Security
A vulnerability in Azure Kubernetes Services could have allowed attackers to escalate privileges and access sensitive information on the clusters.
Hi, what are you looking for?
SecurityWeek
Cloud Security
Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments.
Cloud Security
CISA’s Binding Operational Directive 25-01 requires federal agencies to align cloud environments with SCuBA secure configuration baselines.
Cloud Security
Researchers warn about critical vulnerabilities in Ruijie Networks’ Reyee cloud management platform and Reyee OS network devices.
Cloud Security
Veeam releases patches for two vulnerabilities in Service Provider Console, including a critical-severity remote code execution bug.
Cloud Security
AWS and other vendors have announced new cloud security products and features at the cloud giant’s re:Invent 2024 conference.
Cloud Security
AWS has launched Security Incident Response, a new service for quick and efficient security event management.
Cloud Security
Microsoft is implementing automatic enforcement of multi-factor authentication (MFA) for all Azure users starting October.
Cloud Security
Security researchers at Palo Alto Networks discover a threat actor extorting organizations after compromising their cloud environments using inadvertently exposed environment variables.
Cloud Security
Azure Health Bot Service vulnerabilities found by Tenable could have been exploited for lateral movement and may have allowed customer data exposure.
Cloud Security
AWS has patched vulnerabilities in several products, including flaws that could have been exploited to take over accounts.
Artificial Intelligence
AWS says a massive neural network graph model with 3.5 billion nodes and 48 billion edges is speeding up the prediction and detection of...
Cloud Security
Microsoft’s response to a DDoS attack on Azure amplified the impact of the attack instead of mitigating it, causing outages.
CISO Strategy
SecurityWeek fireside chat: Google Cloud CISO on CISA’s secure-by-design initiatives, government regulations, holding vendors accountable, and transformational security leadership.
Cloud Security
Wiz has detailed SeleniumGreed, a campaign in which threat actors target exposed Selenium Grid instances for cryptomining.
Cloud Security
The vulnerability, tagged as CVE-2024-41110 with a CVSS severity score of 10/10, was originally found and fixed in 2018.
Artificial Intelligence
Zest Security emerged from stealth with $5 million funding and an AI-powered platform that resolves the root source of risk in the cloud.
Artificial Intelligence
The new financing brings the total raised by Dazz to $110 million as investors double down on bets in the cloud security remediation space.
Government
The Treasury Department announced sanctions in connection with a massive Chinese hack of American telecommunications companies and a breach of its own computer network.
Vulnerabilities
Malware & Threats
Government
TikTok said it will have to “go dark” this weekend unless Biden assures the company it won’t enforce a shutdown after the Supreme Court...
Application Security
Data Breaches
