The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Latin America (LATAM)-based financially motivated actor codenamed FLUXROOT has been observed leveraging Google Cloud serverless projects to orchestrate crede…
French cloud computing firm OVHcloud said it mitigated a record-breaking distributed denial-of-service (DDoS) attack in April 2024 that reached a packet rate o…
The Iranian state-backed hacking outfit called APT42 is making use of enhanced social engineering schemes to infiltrate target networks and cloud environments.…
The way we protect our cloud data is undergoing significant transformations. With the increasing reliance…Evolving Trends in Cloud Data Protection for 2024 on …
As cyber threats loom around every corner and privileged accounts become prime targets, the significance of implementing a robust Privileged Access Management …
The threat actor referred to as Cloud Atlas has been linked to a set of spear-phishing attacks on Russian enterprises.Targets included a Russian agro-industria…
Threat actors can take advantage of Amazon Web Services Security Token Service (AWS STS) as a way to infiltrate cloud accounts and conduct follow-on attacks.Th…
Numerous security vulnerabilities riddled the privacy of ownCloud users that the vendor patched recently. Exploiting…Multiple Vulnerabilities Found In ownCloud…
VMware is warning of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protect…
Software development company Retool has disclosed that the accounts of 27 of its cloud customers were compromised following a targeted and SMS-based social eng…
As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even t…
Researchers found a critical vulnerability in the Google Cloud Build that allowed elevated privileges to…A Google Cloud Build Vulnerability Could Aid Supply-Ch…
A little over a week afterJumpCloud reset API keys of customersimpacted by a security incident, the company said the intrusion was the work of a sophisticated …
5G is a game changer for mobile connectivity, including mobile connectivity to the cloud. The technology provides high speed and low latency when connecting sm…
A recent report entitled Cloud Native and Kubernetes Security Predictions 2023 underscores the rapidly evolving landscape of Kubernetes and cloud security, emp…
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…
A new "comprehensive toolset" calledAlienFoxis being distributed on Telegram as a way for threat actors to harvest credentials from API keys and secrets from p…
Malicious actors can take advantage of "insufficient" forensic visibility into Google Cloud Platform (GCP) to exfiltrate sensitive data, a new research has fou…
The Cloud Native Computing Foundation (CNCF) early this month in Seattle hosted the first standalone CloudNativeSecurityCon (CNSCon) North America 2023 . The e…
Red Hat and Oracle announced jointly Tuesday that they have partnered to bring Red Hat Enterprise Linux (RHEL) to Oracle Cloud Infrastructure, broadening Oracl…
We live in a multi-cloud world. Data, applications, and systems now span corporate data centers,…Multi-Cloud Architectures Driving Changes for Compliance and A…
Apple on Wednesdayannounceda raft of security measures, including an Advanced Data Protection setting that enables end-to-end encrypted (E2EE) data backups in …
IBM has fixed a high-severity security vulnerability affecting its Cloud Databases (ICD) for PostgreSQL product that could be potentially exploited to tamper w…
If you have an account on SoundCloud, you already know how perfect the platform is…Copyright and Cyber Security Rules for SoundCloud Creators: How to Promote Y…