Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Google researcher documents a pair of Zoom security defects and chides the company for missing a decades-old anti-exploit mitigation. [Read More]
Cloud security firm Polar Security has emerged from stealth with $8.5 million seed funding to provide visibility into companies’ cloud data storage to allow security teams to secure the data and avoid compliance problems. [Read More]
A vulnerability in Box's implementation of multi-factor authentication (MFA) allowed attackers to take over accounts without needing access to the target's phone. [Read More]
Cybersecurity startup Permiso has emerged from stealth with $10 million in funding to identify and track human, machine, vendor and service provider identities in IaaS and PaaS infrastructures. [Read More]
Security researchers document vulnerabilities in AWS CloudFormation and AWS Glue that could be abused to leak sensitive files and access other customer’s data. [Read More]
Federal Communications Commission (FCC) Chairwoman Jessica Rosenworcel proposes strengthening rules around telecom providers’ reporting of data breaches. [Read More]
Apple ships iOS fix for a persistent HomeKit denial-of-service flaw but only after an independent researcher publicly criticized the company for ignoring his discovery. [Read More]
Mozilla fixes multiple high-severity vulnerabilities with the release of Firefox 96, Firefox ESR 91.5, and Thunderbird 91.5. [Read More]
Eureka has emerged from stealth mode with a cloud data security posture management platform and $8 million in seed funding. [Read More]
Microsoft’s first batch of patches for 2022 cover at least 97 security flaws, including a critical HTTP Protocol Stack bug described as “wormable.” [Read More]
- 1 of 103
- ››
FEATURES, INSIGHTS // Cloud Security
Defense-in-depth encourages a review of all tools in place, ultimately defining a strategy to use everything available to create a layered security approach between users (or potential attackers) and applications/microservices in use.
Most cyber insurance providers are demanding that companies supply proof of their backup implementation in order to obtain an affordable policy.
Current cloud deployments pose significant risks that could be mitigated with minor changes to infrastructure procurement and access.
The flexible and secure nature of the cloud allows security and application teams to focus on defining strategy for the future rather than being consumed by the management of what is in place today.
The most common “new project” in identity nowadays is in Zero Trust. This concept has been evolving for years, and is building controls around an interesting premise: the idea that every resource will one day be internet-facing.
In the merry-go-round world of InfoSec technologies and “what’s old is new again,” this year we should include Attack Surface Management with a dash of Continuous.
Shifting to the cloud can be a radical but necessary change. There’s no denying the transition can be time consuming and costly upfront.
The combination of “shifting left” and “cloud security” is going to happen and be called “shifting everywhere.”
Once live stomping around vendor-packed expo halls at security conferences returns, it is highly probable that “Virtual Analyst” will play a starring role in buzzword bingo.
Managed security services are undergoing a timely and significant transformation, armed with new hyperscalable technology stacks, hybrid enterprise and cross-cloud protection complexities.
- 1 of 17
- ››
Get the Daily Briefing
- Polkit Vulnerability Provides Root Privileges on Linux Systems
- Europe's Hypocrisy Over Personal Data Privacy Exposed
- Two More Poles Identified as Victims of Hacking With Spyware
- SonicWall Customers Warned of Possible Attacks Exploiting Recent Vulnerability
- New macOS Malware 'DazzleSpy' Used in Hong Kong Attacks
- UK's NCSC Pushes NMAP Scanner Scripts to Fill Defender Gap
- PrinterLogic Patches Code Execution Flaws in Printer Management Suite
- Hunters Raises $68 Million for Its SecOps Platform
- Revelstoke Emerges From Stealth With SOAR Platform
- Combating the Surge in Retail Theft and E-Commerce Fraud With Open Source Intelligence
Copyright © 2022 Wired Business Media. All Rights Reserved. Privacy Policy