Cloud Security
Join us as we explore the latest trends in the world of SaaS security, cyberattacks against cloud infrastructure, data security posture management (DSPM), and...
Hi, what are you looking for?
SecurityWeek
Cloud Security
Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments.
Cloud Security
CISA’s Binding Operational Directive 25-01 requires federal agencies to align cloud environments with SCuBA secure configuration baselines.
Cloud Security
Researchers warn about critical vulnerabilities in Ruijie Networks’ Reyee cloud management platform and Reyee OS network devices.
Cloud Security
Veeam releases patches for two vulnerabilities in Service Provider Console, including a critical-severity remote code execution bug.
Cloud Security
AWS and other vendors have announced new cloud security products and features at the cloud giant’s re:Invent 2024 conference.
Cloud Security
AWS has launched Security Incident Response, a new service for quick and efficient security event management.
Artificial Intelligence
SAP patches AI Core vulnerabilities allowing attackers to access customer data and take over the service.
Cloud Security
Google's parent company Alphabet is reportedly in advanced talks to acquire the hotshot Israeli data security startup.
Cloud Security
Citrix rolls out patches for multiple security vulnerabilities, including critical and high-severity issues in the NetScaler product line.
Cloud Security
Kaspersky said the CloudSorcerer APT has been abusing public cloud services to exfiltrate data from Russian government entities.
Cloud Security
With Living Off the Cloud (LOTC) attacks, hackers abuse APIs of trusted cloud services to remotely control botnets but also to make malicious traffic...
Cloud Security
Google has announced new Chrome Enterprise Core features that should be very useful to IT and security teams.
Cloud Security
AWS announced passkey MFA for IAM and root users, IAM Access Analyzer updates, and Amazon GuardDuty Malware Protection for S3.
Cloud Security
Mandiant says a financially motivated threat actor has compromised hundreds of Snowflake instances using customer credentials stolen via infostealer malware that infected non-Snowflake owned...
Cloud Security
Fortinet announces plans to acquire Lacework, a late-stage cloud security startup that was once listed as a “unicorn” company valued north of $1 billion.
Cloud Security
Tenable goes shopping again in Israel with plans to buy early stage startup Eureka Security to boost data security posture management tooling.
Cloud Security
Cloudlfare acquires Boston seed-stage startup BastionZero to bolster its Zero Trust Network Access technology portfolio.
Vulnerabilities
Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024.
Malware & Threats
Malware & Threats
Malware & Threats
Tracking & Law Enforcement
Cybercrime
The US, Japan, and South Korea say North Korean hackers stole roughly $660 million in cryptocurrency last year.
Vulnerabilities
Malware & Threats
