Stay updated with the latest trends and security protocols in cloud computing. Navigate the evolving landscape of Cloud Information Security with us.
Search across headline titles and summaries.
Background for this topic.
Cloud computing involves delivering computing services—such as storage, processing, and networking—over the internet using remote data centers. This model enables organizations to scale resources dynamically without owning physical infrastructure. In security terms, the cloud environment is defined by multi-tenant infrastructure where multiple customers share hardware and software resources managed by a cloud provider.
Key security concerns include controlling access through strong identity and access management (IAM), protecting data with encryption both at rest and in transit, and managing vulnerabilities in shared infrastructure components. The cloud’s shared responsibility model requires customers to secure their applications and data while providers secure the underlying platform. Misconfigurations, weak access controls, and insufficient monitoring can expose cloud assets to unauthorized access or data leakage, making precise configuration and continuous security assessment essential.
Forcepoint's Ronan Murphy on Data-Centric Security in the AI EraTechnologies such as AI and cloud are accelerating digital transformation programs across all industries, leaving CISOs with a stark choice: Hit the brakes on innovation or secure the data that's fueling it. Forcepoint's Ronan Murphy shares ways to navigate this changing security landscape.
Google's Anton Chuvakin Calls for Layered Defenses When Deploying AI ToolsAccording to Anton Chuvakin, security advisor at Google Cloud's Office of the CISO, relying solely on artificial intelligence model training or adversarial testing is not enough. Effective AI defense demands a "defense-in-depth" approach and proven best practices for autonomous actions.
Hackers Can Use Unverified Email to Log onto SaaS Apps With Entra IDA flaw in a Microsoft single sign-on feature allowing cloud app account takeovers discovered in 2023 never really went away, say researchers - notwithstanding a computing giant claim that it almost immediately fixed the vulnerability known as nOAuth.
Hypori's Lewandowski on Eliminating Data and Apps From Personal DevicesTraditional BYOD strategies rely on managing personal devices directly, which introduces privacy concerns and leaves organizations vulnerable to attacks such as phishing, network compromise and device rooting, said Wayne Lewandowski, chief revenue officer at Hypori.