Security news aggregator

Latest coverage for Cloud

Stay updated with the latest trends and security protocols in cloud computing. Navigate the evolving landscape of Cloud Information Security with us.

11 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Cloud computing involves delivering computing services—such as storage, processing, and networking—over the internet using remote data centers. This model enables organizations to scale resources dynamically without owning physical infrastructure. In security terms, the cloud environment is defined by multi-tenant infrastructure where multiple customers share hardware and software resources managed by a cloud provider.

Key security concerns include controlling access through strong identity and access management (IAM), protecting data with encryption both at rest and in transit, and managing vulnerabilities in shared infrastructure components. The cloud’s shared responsibility model requires customers to secure their applications and data while providers secure the underlying platform. Misconfigurations, weak access controls, and insufficient monitoring can expose cloud assets to unauthorized access or data leakage, making precise configuration and continuous security assessment essential.

Showing 11 most recent headlines Filtered view
Bank Info Security 1 year, 10 months ago

North Korean Hackers Pivot Away From Public Cloud

Kimsuky, or a Related Group, Deploys XenoRAT VariantA North Korean hacking team hastily pivoted from using publicly available cloud computing storage to its own infrastructure after security researchers unmasked a malware campaign. The group shifted from using cloud service including Google Drive, OneDrive, and Dropbox to systems under its control.

More from Bank Info Security 23 Aug 2024, 10:00 a.m. Cloud Google Hacking Kimsuky Malware North Korea Research
The Register 1 year, 10 months ago

Kick off early Octoberfest with an EUC-fest

Visit IGEL’s DISRUPT Munich event this September to learn more about the latest end user computing technologies Sponsored Post The IGEL DISRUPT Munich event promises an opportunity to explore the latest innovations in end user computing (EUC), with a focus on endpoint security, Zero Trust, digital workspaces and cloud infrastructures.…

More from The Register 22 Aug 2024, 8:57 p.m. Cloud Endpoint Security Zero Trust

If you needed yet another reminder of what happens when security basics go awry Updated It's a good news day for organizations that don't leave their AWS environment files publicly exposed because infosec experts say those that do may be caught up in an extensive and sophisticated extortion campaign.…

More from The Register 22 Aug 2024, 5:23 a.m. Amazon Web Services Cloud Exposure Extortion
The Hacker News 1 year, 10 months ago

It's Time To Untangle the SaaS Ball of Yarn

It's no great revelation to say that SaaS applications have changed the way we operate, both in our personal and professional lives. We routinely rely on cloud-based and remote applications to conduct our basic functions, with the result that the only true perimeter of our networks has become the identities with which we log into these services

More from The Hacker News 21 Aug 2024, 11:11 p.m. Cloud

As cloud infrastructure becomes the backbone of modern enterprises, ensuring the security of these environments is paramount. With AWS (Amazon Web Services) still being the dominant cloud it is important for any security professional to know where to look for signs of compromise. AWS CloudTrail stands out as an essential tool for tracking and logging API activity, providing a comprehensive

More from The Hacker News 21 Aug 2024, 8:13 a.m. Amazon (company) Amazon Web Services API Artificial Intelligence Cloud Compromise Theft