Cloud Security
Misconfigured Apache Pinot instances can and have enabled threat actors to gain access to sensitive information.
Hi, what are you looking for?
SecurityWeek
All posts tagged "cloud security"
Cloud Security
The greatest security policies in the world are useless if enterprises don’t have a reasonable, consistent, and reliable way to implement them.
Cloud Security
Google has patched a Cloud Run vulnerability dubbed ImageRunner that could have been exploited to gain access to sensitive data.
Cloud Security
Despite Oracle categorically denying that its Cloud systems have been breached, sample data released by the hacker seems to prove otherwise.
Cloud Security
Critical remote code execution vulnerabilities found by Wiz researchers in Ingress NGINX Controller for Kubernetes.
Cloud Security
Industry professionals comment on Google acquiring cloud security giant Wiz for $32 billion in cash.
Funding/M&A
Google has confirmed reports that it’s buying cloud security giant Wiz and says it’s prepared to pay $32 billion in cash.
Cloud Security
Rad Security has raised $14 million in Series A funding for a defense platform for AI workloads and cloud infrastructure.
Cloud Security
Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments.
Cloud Security
CISA’s Binding Operational Directive 25-01 requires federal agencies to align cloud environments with SCuBA secure configuration baselines.
Cloud Security
AWS and other vendors have announced new cloud security products and features at the cloud giant’s re:Invent 2024 conference.
Cloud Security
AWS has launched Security Incident Response, a new service for quick and efficient security event management.
Cloud Security
Google Cloud will be assigning CVE identifiers to serious cloud vulnerabilities, even ones that don’t require patching.
Cloud Security
Microsoft has patched ‘critical’ privilege escalation and information disclosure vulnerabilities in Power Platform, Dataverse and the Imagine Cup website.
Cloud Security
Google Cloud makes new confidential computing options generally available and expands attestation support.
Cloud Security
Tamnoon has raised $12 million in Series A funding for its Managed Cloud Security Remediation service.
Cloud Security
As many as 15,000 applications using AWS Application Load Balancer (ALB) could be exposed to ALBeast attacks.
Cloud Security
Azure Health Bot Service vulnerabilities found by Tenable could have been exploited for lateral movement and may have allowed customer data exposure.
Cloud Security
Wiz has detailed SeleniumGreed, a campaign in which threat actors target exposed Selenium Grid instances for cryptomining.
Artificial Intelligence
Zest Security emerged from stealth with $5 million funding and an AI-powered platform that resolves the root source of risk in the cloud.
Artificial Intelligence
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
Malware & Threats
Malware & Threats
Data Breaches
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
Data Breaches
