Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Google Cloud has addressed a medium-severity security flaw in its platform that could be abused by an attacker who already has access to a Kubernetes cluster t…
The maintainers of the open-source file-sharing software ownCloud have warned of three critical security flaws that could be exploited to disclose sensitive in…
A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors…
Two critical security flaws discovered in the open-sourceCasaOSpersonal cloud software could be successfully exploited by attackers to achieve arbitrary code e…
Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environmentthrough an SQL Server instance."The a…
North Korean nation-state actors affiliated with the Reconnaissance General Bureau (RGB) have been attributed to theJumpCloud hackfollowing an operational secu…
An analysis of the indicators of compromise (IoCs) associated with the JumpCloud hack has uncovered evidence pointing to the involvement of North Korean state-…
Microsoft on Wednesday announced that it's expanding cloud logging capabilities to help organizations investigate cybersecurity incidents and gain more visibil…
As many as 196 hosts have been infected as part of an aggressive cloud campaign mounted by the TeamTNT group calledSilentbob."The botnet run by TeamTNT has set…
A new fileless attack dubbedPyLoosehas been observed striking cloud workloads with the goal of delivering a cryptocurrency miner, new findings from Wiz reveal.…
Ransomware actors and cryptocurrency scammers have joined nation-state actors in abusing cloud mining services to launder digital assets, new findings reveal."…
The digital age we live in has brought so many upgrades and advancements to web-based…The Ultimate Guide to Cloud Security: Protecting Your Data in the Digital…
A survey of global cybersecurity leaders through the 2023 Certified CISO Hall of Fame Report commissioned by the EC-Council identified 4 primary areas of grave…
The following updated rpms for Oracle Linux Cloud Native Environment 1.6 have been uploaded to the Unbreakable Linux Network:
USN-6042-1 introduced a regression in Cloud-init.
Perhaps you're thinking of launching an e-commerce store, or you already have one and are looking for a flexible and secure way to run it. If so, using Linux i…
Google has announced the launching of an AI-powered platform for improved security. Dubbed the “Google…Google Cloud Rolls Out Security AI Workbench For Threat …
cloud-init could write sensitive information to logs.
Google's cloud division is following in thefootsteps of Microsoftwith the launch ofSecurity AI Workbenchthat leverages generative AI models to gain better visi…
Search giant Google on Monday unveiled a major update to its12-year-oldAuthenticator app for Android and iOS with an account synchronization option that allows…
A severe zero-day vulnerability, identified as the “GhostToken” flaw, could allow an adversary to infect…GhostToken Zero-Day Vulnerability Found In Google Clou…
Cybersecurity researchers have disclosed details of a now-patched zero-day flaw in Google Cloud Platform (GCP) that could have enabled threat actors to conceal…
Four different Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF) attacks that could be exploited to gain unauthorized a…
Multiple vulnerabilities have been found in Nextcloud, the worst of which could result in denial of service.
