Top

Category: Cloud Security


Cloud Security

UK government releases new cloud SCADA security guidance for OT

March 18, 2024

Via: TechRadar

The UK National Cyber Security Center (NCSC) has released new guidance on securing supervisory control and data acquisition (SCADA) cloud environments for operational technology (OT). UK critical national infrastructure (CNI) is highly dependent on SCADA as a means for data […]


Cloud Security

Google’s Security Command Center Enterprise fills gaps across cloud security lifecycle

March 12, 2024

Via: CSO Online

Google’s new Security Command Center Enterprise (SCC Enterprise) could streamline cloud risk management through AI automation, saving security teams time, experts say. Enhanced with Mandiant threat intelligence and generative AI, SCC Enterprise aims to offer comprehensive insights across the cloud […]


Cloud Security

5 PaaS security best practices to safeguard the app layer

March 11, 2024

Via: Computer Weekly

PaaS is a cloud model through which service providers deliver an environment where customers can develop, run and manage applications. Because PaaS providers host the hardware and software on their infrastructure, customers aren’t burdened with having to do so in-house. […]


Cloud Security

Zero Trust security in your data center

March 7, 2024

Via: Network World

The cybersecurity threat landscape has changed dramatically in recent years. Today, adversaries are more motivated than ever to penetrate enterprise data centers and steal valuable information. Therefore, adopting the concept of Zero Trust is the number one trend in enterprise […]


Cloud Security

Achieve scalable cyber resiliency in the cloud during an age of exponential data growth

March 5, 2024

Via: CIO

Data volumes continue to grow exponentially, and there’s no end in sight. IDC predicts that the amount of commercial data in storage will be 12.8 ZB by 2026. A typical novel contains 1 MB of data and is about 12 […]


Cloud Security

Kubernetes cloud costs spike as overprovisioning persists

February 28, 2024

Via: CIO Dive

As organizations migrate more workloads, the pressure to keep a lid on cloud cost intensifies. Enterprises prioritized optimization in 2023, leaning on providers to deliver better usage data and implementing FinOps practices to track and trim spending. Kubernetes, the open […]


Cloud Security

Can ransomware infect backups? 3 tips to protect data

February 28, 2024

Via: Computer Weekly

A common misconception around IT security is that backups equate to ransomware protection. Backups can be crucial to recovery and keeping data safe. However, they are not immune to the ransomware threat. If an attacker has infiltrated the primary data […]


Cloud Security

Cloud intrusions spiked 75% in 2023, CrowdStrike says

February 26, 2024

Via: CIO Dive

Threat actors are taking advantage of inconsistent cloud security structures and “living in that uncertainty between the enterprise and the cloud,” Meyers said last week during a media briefing. Cybercriminals are using the cloud to deploy tooling, such as Microsoft […]


Cloud Security

SASE, multicloud spur greater collaboration between network and security teams

February 22, 2024

Via: Network World

Network teams and cybersecurity teams are collaborating more and more, we’ve found in our research at Enterprise Management Associates (EMA). We explored this issue most recently in our report, “NetSecOps: Examining How Network and Security Teams Collaborate for a Better […]


Cloud Security

Infoblox brings AI to DNS protection service

February 14, 2024

Via: Network World

Infoblox is rolling out an AI-based package to bolster its domain name system (DNS) protection portfolio and boost security for widely disbursed, DNS-networked enterprise resources. SOC Insights is a cloud-based expansion of the vendor’s current BloxOne DNS Threat Defense package. […]


Cloud Security

Visibility, alarm fatigue top remediation concerns in cloud security

February 14, 2024

Via: CSO Online

Striking a balance between sufficient visibility into cloud computing environments and the potential for an overdose of false positives and duplicate alerts is the key challenge facing cloud security professionals, according to the State of Security Remediation report from the […]


Cloud Security

How to strengthen your Kubernetes defenses

February 13, 2024

Via: CSO Online

The runaway success of Kubernetes adoption by enterprise software developers has created motivation for attackers to target these installations with specifically designed exploits that leverage its popularity. Attackers have become better at hiding their malware, avoiding the almost trivial security […]


Cloud Security

5 Reasons You Need DAST to Secure Your Cloud

February 12, 2024

Via: Cloud Tweaks

Dynamic Application Security Testing (DAST) is an automated testing process designed to identify security vulnerabilities in a web application. It does this by simulating attacks on the application and analyzing the responses. Unlike static testing, which analyzes an application’s code, […]


Cloud Security

Cisco patches serious flaws in Expressway and ClamAV

February 9, 2024

Via: CSO Online

Cisco has fixed three serious cross-site request forgery (CSRF) vulnerabilities in its Expressway Series collaboration gateway and a denial-of-service (DoS) flaw in the ClamAV anti-malware engine. CSRF flaws allow unauthenticated attackers to perform arbitrary actions on vulnerable devices by tricking […]


Cloud Security

Is your cloud security strategy ready for LLMs?

February 8, 2024

Via: CSO Online

The aggressive use of large language models (LLMs) across enterprise environments in 2024 presents a new headache for CISOs. LLMs have their own cybersecurity challenges, especially with data leakage. The cloud has its own issues, with cloud platform providers making […]


Cloud Security

Cisco’s identity and access security offerings to receive AI upgrades

February 6, 2024

Via: CSO Online

Cisco has announced plans to infuse new security and AI capabilities within Cisco Security Cloud, the company’s integrated, cloud-based security platform designed to secure on-premise, cloud, and hybrid environments, using in-house as well as third-party telemetry. New capabilities include Cisco […]


Cloud Security

Cisco boosts security wares with AI-driven access control, identity management

February 6, 2024

Via: Network World

Cisco is updating elements of its overarching Security Cloud platform to help enterprise customers better protect widely distributed resources. The enhancements include a new service called Identity Intelligence that brings together information from the vendor’s existing security products, such as […]


Cloud Security

Nation-state actor used recent Okta compromises to hack into Cloudflare systems

February 5, 2024

Via: CSO Online

Cloudflare has revealed that a nation-state actor hacked into the company’s self-hosted Atlassian server in November 2023, but the attack was stopped by the internal team within a few days of access. The hack, which used stolen tokens and credentials, […]


Cloud Security

Cloudflare hacked — company reveals details of November 2023 cyberattack, blames previous Okta breach

February 2, 2024

Via: TechRadar

Cloudflare is laying the blame for the cyberattack it suffered late last year the after-effects of the critical Okta breach. The content delivery service provider has published a blog post detailing the cybersecurity incident it suffered on Thanksgiving Day 2023, […]


Cloud Security

Cisco patches critical vulnerability in Unified Communications products

January 26, 2024

Via: CSO Online

Cisco fixed a critical flaw this week that affects multiple Unified Communications and Contact Center Solutions products and could be exploited remotely by unauthenticated attackers to execute arbitrary code on impacted devices. Medium severity vulnerabilities have also been patched in […]