Tag #Cloud Security

Showing 1 to 12 of 18 results

nrc.nl

🌐 90% Global Worthiness

Sep 3, 22:20

Massive Data Leak Exposes Millions of Sensitive Documents in Insecure Cloud Storage

Cybersecurity researchers discovered millions of sensitive documents, including passports, driver's licenses, and medical records, publicly accessible due to misconfigured cloud storage by numerous companies worldwide.

Massive Data Leak Exposes Millions of Sensitive Documents in Insecure Cloud Storage

Cybersecurity researchers discovered millions of sensitive documents, including passports, driver's licenses, and medical records, publicly accessible due to misconfigured cloud storage by numerous companies worldwide.

Progress

24% Bias Score

ShareSaveArticle

Reduced Inequality

12345678

Previous 1 of 8 Next

What is the immediate impact of the insecure cloud storage practices revealed by the cybersecurity researchers?

The immediate impact is the widespread exposure of sensitive personal data belonging to millions of individuals globally. Passports from 89 nationalities, driver's licenses from all US states, and medical records of athletes were among the exposed data, enabling potential identity theft and fraud.

forbes.com

🌐 90% Global Worthiness

May 13, 01:12

RSAC 2025: Identity, Agentic AI, and the Evolving Cybersecurity Landscape

RSAC 2025 showcased a cybersecurity landscape prioritizing identity-centric security, agentic AI for automated threat response, passwordless authentication, and enhanced cloud visibility, while emphasizing the persistent threat of email-based attacks and insider risks.

RSAC 2025: Identity, Agentic AI, and the Evolving Cybersecurity Landscape

RSAC 2025 showcased a cybersecurity landscape prioritizing identity-centric security, agentic AI for automated threat response, passwordless authentication, and enhanced cloud visibility, while emphasizing the persistent threat of email-based attacks and insider risks.

Progress

44% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

How did RSAC 2025 address the evolving role of AI in both cybersecurity defense and attack strategies, and what are the key challenges this presents?

The conference underscored the growing reliance on AI in both offensive and defensive cybersecurity strategies. This dual-edged sword necessitates proactive measures to secure AI systems and protect against AI-driven attacks. The rise of agentic AI reflects a move towards autonomous security operations, demanding a shift in security architectures and expertise.

forbes.com

🌐 85% Global Worthiness

Apr 30, 16:13

Microsoft Warns of Cloud Password Spraying Attack by Storm-1977

Microsoft warns of a new password spraying attack by the Storm-1977 group targeting cloud tenants, particularly in education, exploiting inactive workload identities and using the AzureChecker tool to compromise over 200 containers for cryptomining.

Microsoft Warns of Cloud Password Spraying Attack by Storm-1977

Microsoft warns of a new password spraying attack by the Storm-1977 group targeting cloud tenants, particularly in education, exploiting inactive workload identities and using the AzureChecker tool to compromise over 200 containers for cryptomining.

Progress

40% Bias Score

ShareSaveArticle

Reduced Inequality

12345678

Previous 1 of 8 Next

How did the attackers utilize the AzureChecker tool and stolen credentials to gain access and maintain persistence in the targeted cloud environments?

The attack leverages readily available stolen credentials and exploits the prevalence of inactive workload identities in cloud environments. This underscores the urgent need for enhanced security measures beyond traditional passwords, especially in sectors like education with potentially less robust security practices. The attackers used the AzureChecker tool and an accounts.txt file containing username and password combinations, emphasizing the ease of accessing and utilizing stolen credentials.

nrc.nl

🌐 90% Global Worthiness

Mar 19, 22:16

Alphabet Acquires Cybersecurity Firm Wiz for $32 Billion to Bolster Google Cloud

Alphabet is acquiring cybersecurity startup Wiz for $32 billion to strengthen its Google Cloud platform's security offerings and compete with Microsoft and Amazon, addressing growing cloud data security concerns and multi-cloud strategies; however, FTC approval remains uncertain.

Alphabet Acquires Cybersecurity Firm Wiz for $32 Billion to Bolster Google Cloud

Alphabet is acquiring cybersecurity startup Wiz for $32 billion to strengthen its Google Cloud platform's security offerings and compete with Microsoft and Amazon, addressing growing cloud data security concerns and multi-cloud strategies; however, FTC approval remains uncertain.

Progress

36% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

How does the acquisition address the challenges posed by increasing cloud data security demands and the rising adoption of multi-cloud strategies?

Google Cloud currently holds a 12% market share, lagging behind Microsoft's 21% and Amazon's 30%. Wiz, founded by Israeli intelligence veterans, will enhance Google's capabilities in this area, leveraging its expertise and established relationships with major venture capitalists like Andreessen Horowitz and Sequoia Capital.

forbes.com

🌐 85% Global Worthiness

Mar 15, 13:12

Sophisticated Microsoft 365 Phishing Campaign Bypasses Email Security

A new phishing attack exploits legitimate Microsoft 365 infrastructure to deliver malicious emails that bypass security measures by leveraging trusted Microsoft domains and misconfigured tenants, enabling credential harvesting and account takeovers.

Sophisticated Microsoft 365 Phishing Campaign Bypasses Email Security

A new phishing attack exploits legitimate Microsoft 365 infrastructure to deliver malicious emails that bypass security measures by leveraging trusted Microsoft domains and misconfigured tenants, enabling credential harvesting and account takeovers.

Progress

48% Bias Score

ShareSaveArticle

Reduced Inequality

12345678

Previous 1 of 8 Next

How does this new Microsoft 365 phishing attack bypass traditional email security controls, and what are the immediate consequences for affected users?

A new sophisticated phishing campaign targets Microsoft 365 users by embedding malicious links within legitimate Microsoft communications, bypassing traditional email security measures. The attack leverages trusted Microsoft domains and misconfigured tenants to create authentic-looking phishing emails that evade detection.

forbes.com

🌐 90% Global Worthiness

Feb 5, 01:10

Cloud Security Remediation Gap: 62% of Incidents Stem from Known Vulnerabilities

The ZEST Cloud Risk Exposure Impact Report 2025 reveals that 62% of cloud security incidents result from known, unremediated vulnerabilities, costing organizations over \$2 million annually and creating a 10X remediation gap due to slow manual processes versus AI-powered attacker agility; this neces...

Cloud Security Remediation Gap: 62% of Incidents Stem from Known Vulnerabilities

The ZEST Cloud Risk Exposure Impact Report 2025 reveals that 62% of cloud security incidents result from known, unremediated vulnerabilities, costing organizations over \$2 million annually and creating a 10X remediation gap due to slow manual processes versus AI-powered attacker agility; this neces...

Progress

56% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

How do the manual remediation processes and the attackers' use of AI contribute to the widening gap between remediation speed and attacker agility?

This remediation lag is primarily due to manual remediation processes (90% manual), involving complex workflows across different teams. The report further indicates that over 100 critical risk tickets remain open simultaneously in most organizations, exacerbating the issue. Attackers' use of AI for automated attacks further widens this gap.

repubblica.it

🌐 85% Global Worthiness

Jun 4, 22:13

Hackers Exploit Salesforce App to Extort Data from at Least 20 Companies

Hackers tricked employees of at least 20 European and American companies into installing a modified Salesforce Data Loader via voice phishing, gaining access to sensitive data and potentially other cloud services and internal networks.

Hackers Exploit Salesforce App to Extort Data from at Least 20 Companies

Hackers tricked employees of at least 20 European and American companies into installing a modified Salesforce Data Loader via voice phishing, gaining access to sensitive data and potentially other cloud services and internal networks.

Progress

32% Bias Score

ShareSaveArticle

No Poverty

12345678

Previous 1 of 8 Next

How did the hackers exploit Salesforce's Data Loader to gain access to corporate networks and other cloud services?

The hackers used voice phishing, posing as Salesforce technicians or IT colleagues to urge employees to download a malicious Data Loader. This tool, when compromised, allows access to sensitive company data and potentially other cloud services and internal networks.

forbes.com

🌐 85% Global Worthiness

May 11, 16:09

Microsoft, Google Increase Cloud Vulnerability Transparency

Microsoft and Google disclosed four critical cloud vulnerabilities (CVSS scores 9.1-10.0), affecting Azure and Power Apps; no user action is required as Microsoft has already mitigated the issues, marking a shift toward greater CVE transparency.

Microsoft, Google Increase Cloud Vulnerability Transparency

Microsoft and Google disclosed four critical cloud vulnerabilities (CVSS scores 9.1-10.0), affecting Azure and Power Apps; no user action is required as Microsoft has already mitigated the issues, marking a shift toward greater CVE transparency.

Progress

44% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

What are the most significant cloud security vulnerabilities recently disclosed by Microsoft, and what is their impact?

Microsoft and Google have increased transparency regarding cloud vulnerabilities, disclosing four critical vulnerabilities in Microsoft Azure and Power Apps, with severity ratings ranging from 9.1 to 10.0. No user action is needed as Microsoft has already mitigated these issues.

hu.euronews.com

🌐 95% Global Worthiness

Mar 19, 22:16

Google Acquires Wiz for $32 Billion to Bolster Cloud Security

Google announced a $32 billion acquisition of Wiz, an Israeli cloud security platform with deep ties to Unit 8200, to enhance its cloud security capabilities and address growing AI-related threats. Wiz will join Google Cloud but retain operational independence.

Google Acquires Wiz for $32 Billion to Bolster Cloud Security

Google announced a $32 billion acquisition of Wiz, an Israeli cloud security platform with deep ties to Unit 8200, to enhance its cloud security capabilities and address growing AI-related threats. Wiz will join Google Cloud but retain operational independence.

Progress

44% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

How does Wiz's origin within Unit 8200, an elite Israeli intelligence unit, contribute to its unique capabilities and market value?

This acquisition reflects Google's strategic move to bolster its cloud security offerings in response to increasing cyber threats and the growing reliance on multi-cloud environments. Wiz's strong reputation (4.6-5/5 rating from 507 Google clients) and its existing relationships with major governments (e.g., $1.7B in Israeli government contracts) make it a valuable asset.

smh.com.au

🌐 90% Global Worthiness

Mar 19, 01:13

Google to Acquire Cybersecurity Firm Wiz for \$50 Billion

Google is acquiring Israeli cybersecurity firm Wiz for \$50 billion, exceeding a previous offer, in a deal expected to close next year, boosting Google Cloud's cloud security capabilities and reflecting a friendlier regulatory environment.

Google to Acquire Cybersecurity Firm Wiz for \$50 Billion

Google is acquiring Israeli cybersecurity firm Wiz for \$50 billion, exceeding a previous offer, in a deal expected to close next year, boosting Google Cloud's cloud security capabilities and reflecting a friendlier regulatory environment.

Progress

48% Bias Score

ShareSaveArticle

Decent Work and Economic Growth

12345678

Previous 1 of 8 Next

What factors contributed to the founders of Wiz changing their minds about the Google acquisition after rejecting a previous offer?

The acquisition builds upon a previous offer, reflecting Wiz's rapid growth and market position. The founders' change of heart highlights the increased valuation and potential for faster growth within Google, as well as a friendlier regulatory environment. The deal positions Google to better compete with Microsoft in cloud security.

forbes.com

🌐 85% Global Worthiness

Feb 14, 19:09

Cortex Cloud: Unified Platform Simplifies Cybersecurity Operations and Reduces Costs

Palo Alto Networks announced Cortex Cloud, a unified platform integrating cloud security and SOC capabilities to simplify security operations, reduce costs by up to 50%, and improve threat response by leveraging AI-driven prioritization and automation.

Cortex Cloud: Unified Platform Simplifies Cybersecurity Operations and Reduces Costs

Palo Alto Networks announced Cortex Cloud, a unified platform integrating cloud security and SOC capabilities to simplify security operations, reduce costs by up to 50%, and improve threat response by leveraging AI-driven prioritization and automation.

Progress

48% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

How does Cortex Cloud's AI-driven approach improve security operations and reduce the burden on security teams?

The platform's unified data plane integrates data from various sources, enabling faster incident response by eliminating the need for manual coordination between different tools and departments. Cortex Cloud leverages AI and machine learning to prioritize alerts, focusing resources on critical issues and reducing the time needed to address breaches.

themarker.com

🌐 85% Global Worthiness

Jan 29, 16:12

Tenable Acquires Vulcan Cyber for \$150 Million, Expanding Exposure Management Platform

Tenable, a Nasdaq-listed cybersecurity company, acquired Israeli startup Vulcan Cyber for \$150 million, expanding its exposure management platform by integrating with over 100 external security tools.

Tenable Acquires Vulcan Cyber for \$150 Million, Expanding Exposure Management Platform

Tenable, a Nasdaq-listed cybersecurity company, acquired Israeli startup Vulcan Cyber for \$150 million, expanding its exposure management platform by integrating with over 100 external security tools.

Progress

24% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

What is the strategic significance of Tenable's acquisition of Vulcan Cyber in the cybersecurity market?

Tenable, a publicly traded American cybersecurity firm, acquired the Israeli startup Vulcan Cyber for \$150 million. The acquisition comprised \$147 million in cash and \$3 million in Tenable stock. Vulcan, founded in 2018, had raised \$70 million since its inception.

Showing 1 to 12 of 18 results