Cloud Security
Researchers discovered two vulnerabilities in the Ubuntu OverlayFS module: CVE-2023-2640 and CVE-2023-32629 (together dubbed ‘GameOver(lay)’).
Hi, what are you looking for?
SecurityWeek
Cloud Security
Cloud security startup Circumvent has raised $6 million to develop a network of agents for autonomous prioritization and remediation.
Cloud Security
According to reports, the US Department of Justice will assess whether the deal would harm competition in the cybersecurity market.
Artificial Intelligence
Maze and its investors are betting on finding profits in software that uses AI-powered agents to automate critical parts of the process.
Application Security
Security researchers uncover critical flaws and widespread misconfigurations in Salesforce’s industry-specific CRM solutions.
Cloud Security
Researchers say a whopping 62 percent of AWS environments may be exposed to the newly documented AMD 'Zenbleed' information leak flaw.
Cloud Security
Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online.
Cloud Security
Watch Cloud & Data Security Summit sessions to learn how to utilize tools, controls, and design models needed to properly secure cloud environments.
Cloud Security
Facing intense pressure after Chinese APT hack, Microsoft plans to expand logging defaults for lower-tier M365 customers.
Cloud Security
The planned Oort purchase is Cisco’s fourth acquisition of a cybersecurity company in the first half of 2023.
Cloud Security
Orca Security sues its main rival, claiming patent infringements, intellectual property theft and even marketing copycat behavior.
Artificial Intelligence
What a cloud migration strategy did for cloud adoption, an automation implementation strategy does for security automation adoption.
Cloud Security
Cyera closes a massive $100 million round as investors continue to pour cash into the data security posture management (DSPM) space.
Cloud Security
Businesses using ‘Log in with Microsoft’ could be exposed to privilege escalation and full account takeover exploits.
Cloud Security
Microsoft addressed two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) leading to unauthorized access to user sessions.
Cloud Security
Google Cloud is offering up to $1 million in financial protection to cover expenses associated with undetected cryptomining attacks.
Cloud Security
Sysdig is launching what it claims to be the first CNAPP with end-to-end detection and response, consolidating CNAPP and CDR.
Cloud Security
Salesforce ghost sites — domains that are no longer maintained but still accessible — can expose personal information and business data.
Cloud Security
Google makes ACME API available to all Google Cloud users to allow them to automatically acquire and renew TLS certificates for free.
Cloud Security
GAO report underlines the need for federal agencies to fully implement key cloud security practices.
Cloud Security
Tech giant IBM acquires Polar Security, an early stage startup in the red-hot data security posture management (DSPM) category.
Cloud Security
Google announces the general availability of ‘rules_oci’ Bazel plugin to improve the security of container images.
Cloud Security
Three vulnerabilities in the Azure API Management service could be exploited for internal asset access, DoS, firewall bypass, and the upload of malicious files.
Cloud Security
Aqua Security found over 250 million artifacts and more than 65,000 container images in misconfigured registries.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
In a rapidly changing AI environment, CISOs are worried about investing in the wrong solution or simply not investing because they can’t decide what the best option is.
(Marc Solomon)
Adopting a layered defense strategy that includes human-centric tools and updating security components.
(Stu Sjouwerman)
A strong AI deployment starts with asking the right questions, mapping your risks, and thinking like an adversary — before it’s too late.
(Matt Honea)
It’s time for enterprises to stop treating unmanaged devices as an edge case and start securing them as part of a unified Zero Trust strategy.
(Etay Maor)
Many security professionals feel pressured to pursue leadership roles, but success can also mean going deeper, not just higher.
(Joshua Goldfarb)