Securing the Cloud

‘China’ Azure Breach: MUCH Worse Than Microsoft Said
Richi Jennings | | Active Directory, Authentication, azure, Azure Active Directory, Azure AD, Entra ID, Exchange, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, OpenID, Outlook.com, SB Blogwatch, Storm-0558, Wiz
Storm-0558 Breaks: Satya and Pooh, sitting in a tree, K.I.S.S.I.N.G ...
Security Boulevard

Reddit Ransomware Raid Redux: BlackCat/ALPHV Demands $4.5M
Richi Jennings | | ALPHV ransomware, Blackcat, BlackCat ransomware, Breach, Privacy, Ransomware, reddit, Reddit breach, SB Blogwatch
And now, this: John-Oliver-pics protest won’t change Reddit policy, but will ransom demand work? ...
Security Boulevard

CISA Warning: MOVEit Has Yet Another Zero-Day SQL Injection RCE Bug [updated]
Richi Jennings | | CL0P, Cl0p Ransomware, clop, clop-ransomware, CVE-2023-34362, CVE-2023-35036, CVE-2023-35708, MOVEit Cloud, MOVEit Transfer, MOVEit Transfer Zero Day, Progress Software, Ransomware, SB Blogwatch, sql injection, SQL injection attack, SQL injection attacks, sql injection prevention, SQL Injection Vulnerabilities, SQL injections
Once is happenstance. Twice is coincidence. Three times is sheer incompetence ...
Security Boulevard

Apple, Facebook Doxxed Users—via Fake Police EDRs
Richi Jennings | | Apple, Application Security, Cloud Security, Compliance, Data breach, EDR, emergency data request, facebook, law enforcement, Meta, Phishing, police, Privacy, SB Blogwatch, social engineering, those teenage boys in England should have just stuck to playing a nice game of chess
Hackers have been spoofing email from police forces to steal personal data from big tech companies ...
Security Boulevard

Ransomware, Malware, Phishing Top List of IT Security Concerns
Malware, ransomware and phishing continue to plague global organizations, according to the Thales 2022 Global Data Threat Report. The survey of more than 2,700 executives with influence over IT and data security ...
Security Boulevard

Kaspersky Banned by FCC: ‘Threat to National Security’
Richi Jennings | | fcc, Federal Communications Commission, kaspersky, Kaspersky Lab, national security, SB Blogwatch, The NSA absolutely hates Kaspersky sabotaging their spying
The FCC added Kaspersky Lab to a list of banned companies. The commission alleges the firm is a threat to U.S. national security ...
Security Boulevard

Cloud Automation Key to Future-Proofing Cybersecurity
Nathan Eddy | | Automation, cloud cost management, Cloud Security, network access control, privileged access
Organizations are turning to cloud automation to help them future-proof cybersecurity plans, particularly when coupled with autonomous privileges and access. These were among the results of a Delinea survey of 300 IT ...
Security Boulevard

Are You Prepared for Your Next Cloud Incident?
Cloud adoption continues to accelerate and exceed expectations year after year. Gartner expects public cloud services to grow another 21.7% in 2022, and while this is a positive direction for the industry ...
Security Boulevard

Data Privacy Laws Add Complexity to Securing the Cloud
There are 12 states currently considering new data privacy laws or considering making updates and changes to laws that are already in place. The Virginia Consumer Data Protection Act (VCDPA), for example, ...
Security Boulevard

Cloud Security Tool Sprawl Draining IT Teams
Cloud security management issues are increasing the flood of false positive alerts and missed critical issues and contributing to higher burnout rates for IT teams. These were among the findings of an ...
Security Boulevard