Dark Reading
2 years, 8 months ago
What We Can Learn from Major Cloud Cyberattacks
Analysis of six major cloud incidents shows how some common mistakes can lead to serious consequences.
Security news aggregator
Latest coverage for Cloud
Stay updated with the latest trends and security protocols in cloud computing. Navigate the evolving landscape of Cloud Information Security with us.
11
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Cloud computing involves delivering computing services—such as storage, processing, and networking—over the internet using remote data centers. This model enables organizations to scale resources dynamically without owning physical infrastructure. In security terms, the cloud environment is defined by multi-tenant infrastructure where multiple customers share hardware and software resources managed by a cloud provider.
Key security concerns include controlling access through strong identity and access management (IAM), protecting data with encryption both at rest and in transit, and managing vulnerabilities in shared infrastructure components. The cloud’s shared responsibility model requires customers to secure their applications and data while providers secure the underlying platform. Misconfigurations, weak access controls, and insufficient monitoring can expose cloud assets to unauthorized access or data leakage, making precise configuration and continuous security assessment essential.
Showing 11 most recent headlines
Filtered view
The Register
2 years, 8 months ago
What to do with a cloud intrusion toolkit in 2023? Slap a chat assistant on it, duh
Don't worry, this half-baked Python script is for educational purposes onl-hahaha Infosec bods have detailed an underground cybersecurity tool dubbed Predator AI that not only can be used to compromise poorly secured cloud services and web apps, but has an optional chat-bot assistant that only kinda works.…
Info Security Magazine
2 years, 8 months ago
Predator AI ChatGPT Integration Poses Risks to Cloud Services
This integration reduces reliance on OpenAI’s API while streamlining the tool’s functionality
The Hacker News
2 years, 8 months ago
Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation
Cybersecurity researchers have developed what's the first fully undetectable cloud-based cryptocurrency miner leveraging the Microsoft Azure Automation service without racking up any charges
The Hacker News
2 years, 8 months ago
Confidence in File Upload Security is Alarmingly Low. Why?
Numerous industries—including technology, financial services, energy, healthcare, and government—are rushing to incorporate cloud-based and containerized web applications. The benefits are undeniable; however, this shift presents new security challenges. OPSWAT's 2023 Web Application Security report reveals: 75% of organizations have modernized their infrastructure this year
Dark Reading
2 years, 8 months ago
Steps to Follow to Comply With the SEC Cybersecurity Disclosure Rule
Mandiant/Google Cloud’s Jill C. Tyson offers up timelines, checklists, and other guidance around enterprise-wide readiness to ensure compliance with the new rule.
Dark Reading
2 years, 8 months ago
Kinsing Cyberattackers Debut 'Looney Tunables' Cloud Exploits
Admins need to patch immediately, as the prolific cybercrime group pivots from cryptomining to going after cloud secrets and credentials.
Dark Reading
2 years, 8 months ago
Novel Google Cloud RAT Uses Calendar Events for C2
Cybercriminals are abusing legitimate functions within cloud services, and providers can't totally stop them, especially when it comes to innovative approaches like this.
Bleeping Computer
2 years, 8 months ago
Hackers exploit Looney Tunables Linux bug, steal cloud creds
The operators of the Kinsing malware are targeting cloud environments with systems vulnerable to "Looney Tunables," a Linux security issue identified as CVE-2023-4911 that allows a local attacker to gain root privileges on the system. [...]
Dark Reading
2 years, 8 months ago
Sky's the Limit, but What About API Security? Challenges in the Cloud-First Era
APIs enable cloud transformation but bring security risks, demanding robust, adaptive strategies to safeguard data and operations.
Dark Reading
2 years, 8 months ago
Steps to Follow to Comply With the SEC Cybersecurity Disclosure Rule
Mandiant/Google Cloud's Jill C. Tyson offers up timelines, checklists, and other guidance around enterprisewide readiness to ensure compliance with the new rule.