Cloud Security News this week 14 July 2022 To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 14 July 2022 To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

New Cloud Vulnerability Database + Another Misconfigured S3 Bucket 

Cloud Security News this week 11 May 2022 Brought to you this week by JupiterOne To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 11 May 2022 Brought to you this week by <a href="https://info.jupiterone.com/start-account?utm_source=cloudsecuritypodcast&amp;utm_medium=newsletter&amp;utm_campaign=sponsorship-2022-cloudsecuritypodcast&amp;utm_partner=cloudsecuritypodcast" rel="nofollow" target="_blank">JupiterOne</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

Dell Embraces Multi-cloud + Hackers use stolen OAuth 

Cloud Security News this week 12 April 2022 Brought to you this week by Teleport To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 12 April 2022 Brought to you this week by <a href="https://goteleport.com?utm_campaign=eg&amp;utm_medium=partner&amp;utm_source=cloudsecuritypodcast " rel="nofollow" target="_blank">Teleport</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

AWS Security Hub releases 5 new controls + Latest with Spring4shell

Cloud Security News this week 30 March 2022 To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 30 March 2022 To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

What is Spring4shell? + Should we be concerned?

Cloud Security News this week 30 March 2022 Brought you by - JupiterOne - Find out more about them at www.jupiterone.com/csp To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 30 March 2022 Brought you by - JupiterOne - Find out more about them at <a href="https://www.jupiterone.com/csp" rel="nofollow" target="_blank">www.jupiterone.com/csp</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

Latest with Okta/Lapsus$ + Return of Log4J

Cloud Security News this week 23 March 2022 Brought you by - JupiterOne - Find out more about them at www.jupiterone.com/csp - Hunters - Find out more about them at www.hunters.ai To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 23 March 2022 Brought you by - JupiterOne - Find out more about them at <a href="https://www.jupiterone.com/csp" rel="nofollow" target="_blank">www.jupiterone.com/csp</a> - Hunters - Find out more about them at <a href="https://www.hunters.ai/" rel="nofollow" target="_blank">www.hunters.ai</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

All you need to know about the Okta and Microsoft breach

Cloud Security News this week 16 March 2022 Brought you by - JupiterOne - Find out more about them at www.jupiterone.com/csp - Hunters - Find out more about them at www.hunters.ai To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 16 March 2022 Brought you by - JupiterOne - Find out more about them at <a href="https://www.jupiterone.com/csp" rel="nofollow" target="_blank">www.jupiterone.com/csp</a> - Hunters - Find out more about them at <a href="https://www.hunters.ai/" rel="nofollow" target="_blank">www.hunters.ai</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

The Cyber Defense Matrix + CSA launches Zero Trust Advancement Center

Cloud Security News this week 9 March 2022 Brought you by  - JupiterOne - Find out more about them at www.jupiterone.com/csp - Hunters - Find out more about them at www.hunters.ai To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 9 March 2022 Brought you by  - JupiterOne - Find out more about them at <a href="//www.jupiterone.com/csp" rel="nofollow" target="_blank">www.jupiterone.com/csp</a> - Hunters - Find out more about them at <a href="https://www.hunters.ai/" rel="nofollow" target="_blank">www.hunters.ai</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

Google's 5.4B Aquisition + CNCF Accepts Knative, a kubernetes Platform

JupiterOne

Cloud Security News this week 2 March 2022 Brought you by Hunters - Find out more about them at www.hunters.ai To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 2 March 2022 Brought you by Hunters - Find out more about them at <a href="//www.hunters.ai" rel="nofollow" target="_blank">www.hunters.ai</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

JupiterOne announces open source StarBase

Snyk

Cloud Security News this week 23 February 2022  Brought you by JupiterOne - Find out more about them at https://jupiterone.com/csp To read more about this week's stories head to https://cloudsecuritypodcast.tv/cloud-security-news/ Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 23 February 2022  Brought you by JupiterOne - Find out more about them at <a href="https://jupiterone.com/csp" rel="nofollow" target="_blank">https://jupiterone.com/csp</a> To read more about this week's stories head to <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

Snyk Acquires Fugue + Amazon CodeGuru Reviewer now detects Apache Log4j 

Your weekly digest of what you need to know in the world of Cloud Security. We do the hard work for you, so you are always across the important bits.    Brought to you by the team behind the much loved Cloud Security Podcast

Cloud Security News this week 16 February 2022 - https://cloudsecuritypodcast.tv/cloud-security-news/ Brought you by JupiterOne - Find out more about them at https://jupiterone.com/csp  Google’s Cybersecurity Action Team has released Threat Horizon’s report this month. The report can be accessed here Staying in theme with Google Cloud (which also happens to be our theme for this month at Cloud Security Podcast).  This week they have reported a low severity vulnerability in the Linux kernel's  function. The attack uses unprivileged user namespaces and under certain circumstances this vulnerability can be exploitable for container breakout. You can find out more about this vulnerability here.  Azure has announced Azure Payment HSM in preview in East US and North Europe. You can find out more about it here. Cloud Security Alliance’s Technology and Cloud Security Maturity report. You can read the entire report here. Have you heard about the Internet Society or ISOC? Its one of the oldest global nonprofit with a goal of  keeping the Internet as a force for good: open, globally connected, secure, and trustworthy. The researchers at Clario recently discovered an open and unprotected Microsoft Azure blob repository containing millions of files with personal and login details belonging to ISOC members. A blob container named ISOC contained millions of json files that were structured to include login, password and email. Clario reported this to ISOC and the repository was subsequently secured. ISOC also confirmed that they have not seen any instances of malicious access to member data as a result of this issue. You can read more about this here.  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 16 February 2022 - <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Brought you by JupiterOne - Find out more about them at <a href="https://jupiterone.com/csp" rel="nofollow" target="_blank">https://jupiterone.com/csp</a> <ul> <li>Google’s Cybersecurity Action Team has released Threat Horizon’s report this month. The report can be accessed <a href="https://services.google.com/fh/files/misc/gcat_threathorizons_full_feb2022.pdf" rel="nofollow" target="_blank">here</a></li> <li>Staying in theme with Google Cloud (which also happens to be our theme for this month at Cloud Security Podcast).  This week they have reported a low severity vulnerability in the Linux kernel's  function. The attack uses unprivileged user namespaces and under certain circumstances this vulnerability can be exploitable for container breakout. You can find out more about this vulnerability<a href="https://cloud.google.com/support/bulletins" rel="nofollow" target="_blank"> here. </a></li> <li>Azure has announced <a href="https://azure.microsoft.com/en-us/services/payment-hsm/" rel="nofollow" target="_blank">Azure Payment HSM</a> in preview in East US and North Europe. You can find out more about it <a href="https://azure.microsoft.com/en-us/blog/announcing-the-public-preview-of-microsoft-azure-payment-hsm-service/" rel="nofollow" target="_blank">here.</a></li> <li>Cloud Security Alliance’s Technology and Cloud Security Maturity report. You can read the entire report<a href="https://cloudsecurityalliance.org/artifacts/cloud-security-and-technology-maturity-survey/" rel="nofollow" target="_blank"> here.</a></li> <li>Have you heard about the Internet Society or ISOC? Its one of the oldest global nonprofit with a goal of  keeping the Internet as a force for good: open, globally connected, secure, and trustworthy. The researchers at <a href="https://clario.co/blog/internet-society-member-data-breach/" rel="nofollow" target="_blank">Clario</a> recently discovered an open and unprotected Microsoft Azure blob repository containing millions of files with personal and login details belonging to ISOC members. A blob container named ISOC contained millions of json files that were structured to include login, password and email. Clario reported this to ISOC and the repository was subsequently secured. ISOC also confirmed that they have not seen any instances of malicious access to member data as a result of this issue. You can read more about this <a href="https://clario.co/blog/internet-society-member-data-breach/" rel="nofollow" target="_blank">here</a>.</li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

Azure Launches Azure Payment HSM 

Cloud Security News this week 09 February 2022 - https://cloudsecuritypodcast.tv/cloud-security-news/ Brought you by JupiterOne - Find out more about them at https://jupiterone.com/csp  Google Cloud has released the Virtual Machine Threat Detection tool as part of their Security Command Center for Premium customer. According to Google’s blog this “is a first-to-market detection capability from a major cloud provider that provides agentless memory scanning to help detect threats like cryptomining malware inside your virtual machines running in Google Cloud.”  For those familiar with AWS Guardduty, how does this compare - share with us on linkedin, twitter or on our website. You can read Google Cloud’s announcement here. Being a Cloud Security Enthusiast, you are probably familiar with the Cloud Security Alliance, they are well known for defining standards, certifications, and best practices for security cloud environments. This week they have released DevSecOps - Pillar 4 Bridging Compliance and Development as part of the DevSecOps Six Pillars series. This document focuses on how compliance can be automated and better relate to security requirements. You can access the full document here. We would love to hear your thoughts about this pillar, so please share your views on www.cloudsecuritypodcast.tv Security Researcher Harsh Jaiswal received a bounty award of $17,576 for whats been described as a “pretty simple” but critical SSRF related to HelloSign’s Google Drive Docs export feature.You can read more about the security team’s response here and the vulnerability report here. Cloudflare, a Silicon Valley provider of content delivery network (CDN) and DDoS mitigation services has launched a public bug bounty program, further to their invite-only program in place since 2018. You can find out more about the program here Tenable, a popular product for vulnerability scanning,  has announced new features to their cloud native application security program, Tenable.cs. You can find our more about tenable and tenable.cs here. Amazon GuardDuty now protects Amazon Elastic Kubernetes Service clusters. You can read more about this here  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News 

Cloud Security News this week 09 February 2022 - <a href="https://cloudsecuritypodcast.tv/cloud-security-news/" rel="nofollow" target="_blank">https://cloudsecuritypodcast.tv/cloud-security-news/</a> Brought you by JupiterOne - Find out more about them at <a href="https://jupiterone.com/csp" rel="nofollow" target="_blank">https://jupiterone.com/csp</a> <ul> <li>Google Cloud has released the <a href="https://cloud.google.com/blog/products/identity-security/virtual-machine-threat-detection-in-security-command-center" rel="nofollow" target="_blank">Virtual Machine Threat Detection</a> tool as part of their Security Command Center for Premium customer. According to Google’s blog this “is a first-to-market detection capability from a major cloud provider that provides agentless memory scanning to help detect threats like cryptomining malware inside your virtual machines running in Google Cloud.”  For those familiar with AWS Guardduty, how does this compare - share with us on linkedin, twitter or on our website. You can read Google Cloud’s announcement<a href="https://cloud.google.com/blog/products/identity-security/virtual-machine-threat-detection-in-security-command-center" rel="nofollow" target="_blank"> here.</a></li> <li>Being a Cloud Security Enthusiast, you are probably familiar with the Cloud Security Alliance, they are well known for defining standards, certifications, and best practices for security cloud environments. This week they have released DevSecOps - Pillar 4 Bridging Compliance and Development as part of the DevSecOps Six Pillars series. This document focuses on how compliance can be automated and better relate to security requirements. You can access the full document <a href="https://s3.amazonaws.com/content-production.cloudsecurityalliance/fdppk4azlf38l8f1dugug6a53mt8?response-content-disposition=inline%3B%20filename%3D%22DevSecOps-Pillar4020322.pdf%22%3B%20filename%2A%3DUTF-8%27%27DevSecOps-Pillar4020322.pdf&amp;response-content-type=application%2Fpdf&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIAJ7D6HHC2YHBAPZ2Q%2F20220209%2Fus-east-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20220209T093335Z&amp;X-Amz-Expires=300&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=a49dba45f753f4f6e3a595480b263472d640afacc6017bc2e9ff2e0eabc95b48" rel="nofollow" target="_blank">here</a>. We would love to hear your thoughts about this pillar, so please share your views on <a href="http://www.cloudsecuritypodcast.tv/" rel="nofollow" target="_blank">www.cloudsecuritypodcast.tv</a></li> <li>Security Researcher <a href="https://twitter.com/rootxharsh" rel="nofollow" target="_blank">Harsh Jaiswal </a>received a bounty award of $17,576 for whats been described as a “pretty simple” but critical SSRF related to HelloSign’s Google Drive Docs export feature.You can read more about the security team’s response <a href="https://hackerone.com/reports/1406938" rel="nofollow" target="_blank">here</a> and the vulnerability report <a href="https://github.com/httpvoid/writeups/blob/main/Hacking-Google-Drive-Integrations.md" rel="nofollow" target="_blank">here.</a></li> <li>Cloudflare, a Silicon Valley provider of content delivery network (CDN) and DDoS mitigation services has launched a public bug bounty program, further to their invite-only program in place since 2018. You can find out more about the program <a href="https://blog.cloudflare.com/cloudflare-bug-bounty-program/" rel="nofollow" target="_blank">here</a></li> <li>Tenable, a popular product for vulnerability scanning,  has announced new features to their cloud native application security program, Tenable.cs. You can find our more about tenable and tenable.cs <a href="https://www.tenable.com/press-releases/tenable-expands-tenable-cs-to-deliver-cloud-native-application-security-platform" rel="nofollow" target="_blank">here</a>.</li> <li>Amazon GuardDuty now protects Amazon Elastic Kubernetes Service clusters. You can read more about this here</li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a>

Amazon GuardDuty now protects Amazon EKS

Cloud Security News this week 02 February 2022  Brought you by JupiterOne - Find out more about them at https://jupiterone.com/csp  Google Cloud have reported that 3 security vulnerabilities have been discovered in the Linux kernel, each of which can lead to either a container breakout, privilege escalation on the host, or both.Google have shared that these vulnerabilities affect all GKE node operating systems and Anthos clusters on VMware node operating systems (COS and Ubuntu). Pods using GKE Sandbox are not vulnerable to these vulnerabilities. You can find out more about it here. Safety detectives uncovered and reported on a misconfigured AWS S3 bucket that exposed over 1 million files - “The data we observed related to airport employees from different sites across Colombia and Peru, and there could be entities from other nations with exposed data on the bucket.” The full report can be viewed here. Salesforce now requires all customers to use  multi-factor authentication  MFA in order to access Salesforce products. It's one of the simplest, most effective ways to prevent unauthorized account access and safeguard your data and your customers' data. Let us know what you think of this change and more on this can be found here. Markets and Markets has shared that the “global cloud security market size is expected to grow from USD 40.8 billion in 2021 to USD 77.5 billion by 2026”. You can find out more here Cloud security and compliance automation startup Anitian this week closed a $55 million Series B funding bringing their funding to date to $71 million. In a company blog CEO, ​​Rakesh Narasimhan shared that the new funding is a significant milestone in accelerating their mission to provide the most innovative cloud security, compliance automation, and cloud security posture management (CSPM) platforms that enable enterprises of all sizes with the fastest path to security and compliance in the cloud. You can find out more about them here. Check Point has acquired Spectral, an Israeli startup who have developer-first security tools designed by developers for developers. With this acquisition, Check Point extends its cloud solution, Check Point CloudGuard, with developer-first security platform, to provide a range of cloud application security use cases including Infrastructure as Code (IaC) scanning and hardcoded secrets detection. Find out more here.  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast:

Cloud Security News this week 02 February 2022  Brought you by JupiterOne - Find out more about them at <a href="https://jupiterone.com/csp" rel="nofollow" target="_blank">https://jupiterone.com/csp</a> <ul> <li>Google Cloud have reported that 3 security vulnerabilities have been discovered in the Linux kernel, each of which can lead to either a container breakout, privilege escalation on the host, or both.Google have shared that these vulnerabilities affect all GKE node operating systems and Anthos clusters on VMware node operating systems (COS and Ubuntu). Pods using <a href="https://cloud.google.com/kubernetes-engine/docs/concepts/sandbox-pods" rel="nofollow" target="_blank">GKE Sandbox</a> are not vulnerable to these vulnerabilities. You can find out more about it <a href="https://cloud.google.com/support/bulletins" rel="nofollow" target="_blank">here.</a></li> <li>Safety detectives uncovered and reported on a misconfigured AWS S3 bucket that exposed over 1 million files - “The data we observed related to airport employees from different sites across Colombia and Peru, and there could be entities from other nations with exposed data on the bucket.” The full report can be viewed <a href="https://www.safetydetectives.com/news/securitas-leak-report/" rel="nofollow" target="_blank">here.</a></li> <li>Salesforce now requires all customers to use  multi-factor authentication  MFA in order to access Salesforce products. It's one of the simplest, most effective ways to prevent unauthorized account access and safeguard your data and your customers' data. Let us know what you think of this change and more on this can be found <a href="https://help.salesforce.com/s/articleView?id=000352937&amp;type=1" rel="nofollow" target="_blank">here.</a></li> <li>Markets and Markets has shared that the “global cloud security market size is expected to grow from USD 40.8 billion in 2021 to USD 77.5 billion by 2026”. You can find out more <a href="https://www.marketsandmarkets.com/Market-Reports/cloud-security-market-100018098.html#utm_source=Refferal&amp;utm_medium=PRnewswire&amp;utm_campaign=paidPR" rel="nofollow" target="_blank">here</a></li> <li>Cloud security and compliance automation startup Anitian this week closed a $55 million Series B funding bringing their funding to date to $71 million. In a company blog CEO, ​​<a href="https://www.anitian.com/author/rakesh-narasimhan/" rel="nofollow" target="_blank">Rakesh Narasimhan</a> shared that the new funding is a significant milestone in accelerating their mission to provide the most innovative cloud security, compliance automation, and cloud security posture management (CSPM) platforms that enable enterprises of all sizes with the fastest path to security and compliance in the cloud. You can find out more about them <a href="https://www.anitian.com/" rel="nofollow" target="_blank">here.</a></li> <li>Check Point has acquired Spectral, an Israeli startup who have developer-first security tools designed by developers for developers. With this acquisition, Check Point extends its cloud solution, Check Point CloudGuard, with developer-first security platform, to provide a range of cloud application security use cases including Infrastructure as Code (IaC) scanning and hardcoded secrets detection. Find out more <a href="https://www.checkpoint.com/" rel="nofollow" target="_blank">here.</a></li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>:

Google reports Linux Kernel Vulnerabilities

Cloud Security News this week 26 Jan 2022  Early December on Cloud Security News, we shared that Symphony Technology Group had acquired McAfee for 4 Billion along with FireEye for 1.2 Billion. The merger of these two companies has now form Trellix, which aims to be a leader in extended detection and response (XDR). In their blog post Trellix shared that  “Customers can expect Trellix’s living security platform to deliver bold innovation across the XDR market.”  - “with automation, machine learning, extensible architecture, and threat intelligence.”  You can find out more about Trellix and read their blog post here and let us know if you are excited about this merger? Orca Security is back in the news this week, not for their funding round or their vulnerability findings in AWS. They have made their 1st acquisition: RapidSec, an Israeli cybersecurity startup that protects web applications from client-side attacks. RapidSec’s software allows for detection of  web-application misconfigurations and deviations from best practices. Orca has indicated that it  plans to integrate these web services and API security technologies into its agentless cloud security platform. You can read more about this acquisition here. Cloud Security Firm Polar Security that has emerged from Stealth With $8.5 Million Seed Funding. They are a Tel Aviv, Israel-based cloud security company that aims to provide visibility into companies’ cloud data storage to allow security teams to secure the data and avoid compliance problems. You can find out more about them here Hunters.ai announced that  it has raised a $68 million Series C round bringing their total funding to date to $118 million. Hunters share in their blog that  “Never before has it been more lucrative to be a cyber criminal” and “On the defenders’ side, we see organizations struggling to keep pace. As technology advances and more tools are being used, the attack surface grows and the number of security products used by these organizations increases.” This is where Hunter.ai believes they can help with their Extended Detection and Response (XDR) platform used by Security Operations Center (SOC) teams to detect, investigate and stop threats. You can find out more about them here  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast: - Cloud Security Academy:

Cloud Security News this week 26 Jan 2022 <ul> <li>Early December on Cloud Security News, we shared that Symphony Technology Group had acquired McAfee for 4 Billion along with FireEye for 1.2 Billion. The merger of these two companies has now form Trellix, which aims to be a leader in extended detection and response (XDR). In their blog post Trellix shared that  “Customers can expect Trellix’s living security platform to deliver bold innovation across the XDR market.”  - “with automation, machine learning, extensible architecture, and threat intelligence.”  You can find out more about Trellix and read their blog post <a href="https://www.trellix.com/en-us/about/newsroom/news/news-detail-01192022a.html" rel="nofollow" target="_blank">here</a> and let us know if you are excited about this merger?</li> <li>Orca Security is back in the news this week, not for their funding round or their vulnerability findings in AWS. They have made their 1st acquisition: RapidSec, an Israeli cybersecurity startup that protects web applications from client-side attacks. RapidSec’s software allows for detection of  web-<a href="https://www.sdxcentral.com/resources/glossary/application-2/" rel="nofollow" target="_blank">application</a> misconfigurations and deviations from best practices. Orca has indicated that it  plans to integrate these web services and API security technologies into its agentless <a href="https://www.sdxcentral.com/cloud/definitions/cloud-security-basics-definition/" rel="nofollow" target="_blank">cloud security</a> platform. You can read more about this acquisition <a href="https://www.linkedin.com/feed/update/urn:li:activity:6889587560541241344/" rel="nofollow" target="_blank">here.</a></li> <li>Cloud Security Firm Polar Security that has emerged from Stealth With $8.5 Million Seed Funding. They are a Tel Aviv, Israel-based cloud security company that aims to provide visibility into companies’ cloud data storage to allow security teams to secure the data and avoid compliance problems. You can find out more about them <a href="https://www.polar.security/about" rel="nofollow" target="_blank">here</a></li> <li><a href="http://Hunters.ai" rel="nofollow" target="_blank">Hunters.ai</a> announced that  it has raised a $68 million Series C round bringing their total funding to date to $118 million. Hunters share in their blog that  “Never before has it been more lucrative to be a cyber criminal” and “On the defenders’ side, we see organizations struggling to keep pace. As technology advances and more tools are being used, the attack surface grows and the number of security products used by these organizations increases.” This is where <a href="http://Hunter.ai" rel="nofollow" target="_blank">Hunter.ai</a> believes they can help with their Extended Detection and Response (XDR) platform used by Security Operations Center (SOC) teams to detect, investigate and stop threats. You can find out more about them <a href="https://www.hunters.ai/blog/announcing-our-series-c-and-what-comes-next" rel="nofollow" target="_blank">here</a></li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>: - <a href="https://www.cloudsecuritypodcast.tv/cloud-security-academy" rel="nofollow" target="_blank">Cloud Security Academy</a>:

McFee and FireEye join forces for XDR

Remote

Cloud Security News this week 19 Jan 2022  Cisco Talos Researchers have shared in a blog last week that  a trio of remote access Trojans (RATs)—Nanocore, Netwire and AsyncRAT—are being spread in a campaign that taps public cloud infrastructure and is primarily aimed at victims in the U.S., Italy and Singapore. According to the blog “Threat actors are increasingly using cloud technologies to achieve their objectives without having to resort to hosting their own infrastructure,” and “cloud services like Azure and AWS allow attackers to set up their infrastructure and connect to the internet with minimal time or monetary commitments. It also makes it more difficult for defenders to track down the attackers’ operations.”  Read more about this here. Netskope also released a blog last week about Malwares. Interestingly their research which surveyed millions of users worldwide from January 1, 2020 to November 30, 2021 found that Cloud-delivered malware is now more prevalent than web-delivered malware, accounting for 66%, up from 46% last year. They also found that Google Drive is the top app for most malware downloads and Cloud-delivered malware via Microsoft Office nearly doubled from 2020 to 2021. Read the report here Vulnerability in AWS’s cloudformation service that was discovered and shared by Orca Security. Orca Security confirmed that  AWS completely mitigated within 6 days of their submission.If you want to know more about their discovery, you can read it here The US government is reportedly reviewing the cloud computing arm of Chinese ecommerce giant Alibaba to determine whether or not it poses a risk to national security.” As reported by Reuters, the Biden administration launched the probe to find out more about how Alibaba Cloud stores the data of US clients including personal information and intellectual property and to see if the Chinese government could gain access to it. You can read Reuters report here Sysdig’s platform who were recently valued at 2.5 Billion have expanded their cloud security offering to Azure Cloud aswell. . You can find out more about them here   Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast: - Cloud Security Academy:

Cloud Security News this week 19 Jan 2022 <ul> <li>Cisco Talos Researchers have shared in a blog last week that  a trio of <a href="https://securityboulevard.com/?s=remote+access+Trojan" rel="nofollow" target="_blank">remote access Trojans</a> (RATs)—Nanocore, Netwire and AsyncRAT—are being spread in a campaign that taps public cloud infrastructure and is primarily aimed at victims in the U.S., Italy and Singapore. According to the blog “Threat actors are increasingly using cloud technologies to achieve their objectives without having to resort to hosting their own infrastructure,” and “cloud services like Azure and AWS allow attackers to set up their infrastructure and connect to the internet with minimal time or monetary commitments. It also makes it more difficult for defenders to track down the attackers’ operations.”  Read more about this <a href="https://blog.talosintelligence.com/2022/01/nanocore-netwire-and-asyncrat-spreading.html" rel="nofollow" target="_blank">here.</a></li> <li>Netskope also released a blog last week about Malwares. Interestingly their research which surveyed millions of users worldwide from January 1, 2020 to November 30, 2021 found that Cloud-delivered malware is now more prevalent than web-delivered malware, accounting for 66%, up from 46% last year. They also found that Google Drive is the top app for most malware downloads and Cloud-delivered malware via Microsoft Office nearly doubled from 2020 to 2021. Read the report<a href="https://www.netskope.com/press-releases/netskope-threat-research-reveals-more-than-two-thirds-of-malware-downloads-came-from-cloud-apps-in-2021" rel="nofollow" target="_blank"> here</a></li> <li>Vulnerability in AWS’s cloudformation service that was discovered and shared by Orca Security. Orca Security confirmed that  AWS completely mitigated within 6 days of their submission.If you want to know more about their discovery, you can read it <a href="https://orca.security/resources/blog/aws-cloudformation-vulnerability/" rel="nofollow" target="_blank">here</a></li> <li>The US government is reportedly reviewing the cloud computing arm of Chinese <a href="https://www.techradar.com/au/news/the-best-ecommerce-platform" rel="nofollow" target="_blank">ecommerce</a> giant <a href="https://www.techradar.com/au/news/alibaba-unveils-its-cloud-20" rel="nofollow" target="_blank">Alibaba</a> to determine whether or not it poses a risk to national security.” As <a href="https://www.reuters.com/technology/exclusive-us-examining-alibabas-cloud-unit-national-security-risks-sources-2022-01-18/" rel="nofollow" target="_blank">reported</a> by Reuters, the <a href="https://www.techradar.com/au/news/biden-administration-wants-to-massively-boost-cybersecurity-spending-following-attacks" rel="nofollow" target="_blank">Biden administration</a> launched the probe to find out more about how <a href="https://www.techradar.com/au/reviews/alibaba-cloud" rel="nofollow" target="_blank">Alibaba Cloud</a> stores the data of US clients including personal information and intellectual property and to see if the Chinese government could gain access to it. You can read Reuters report <a href="https://www.reuters.com/technology/exclusive-us-examining-alibabas-cloud-unit-national-security-risks-sources-2022-01-18/" rel="nofollow" target="_blank">here</a></li> <li>Sysdig’s platform who were recently valued at 2.5 Billion have expanded their cloud security offering to Azure Cloud aswell. . You can find out more about them <a href="https://www.businesswire.com/news/home/20220105005449/en/Sysdig-Adds-Cloud-Security-for-Microsoft-Azure-Cloud" rel="nofollow" target="_blank">here </a></li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>: - <a href="https://www.cloudsecuritypodcast.tv/cloud-security-academy" rel="nofollow" target="_blank">Cloud Security Academy</a>:

Remote Access Trojans target Public Cloud Infrastructure

Cloud Security News this week 12 Jan 2022  UK’s financial regulators - The Prudential Regulation Authority is looking to increase it’s monitoring of Cloud providers like AWS, Azure and Google Cloud. According to Financial times, they are looking to gain more access to data from these cloud providers because the impact outages and cyberattacks have on British Banks. They are looking at implementing more robust outages and disaster recovery tests given the increasing reliance UK banks have on a handful of cloud providers. A lot of major British banks have partnerships with cloud providers “AWS has announced deals with Barclays and HSBC, while Lloyd Banking Group holds partnerships with Google Cloud and Microsoft Azure.”. There is an increasing concerns about the impacts on the banks should these cloud providers experience outages. You can view the financial times article here Speaking of regulators and how they are dealing with cloud providers, a few weeks ago in December Chinese regulators have “suspended an information-sharing partnership with Alibaba Cloud Computing” over concerns that it failed to promptly report and address a cybersecurity vulnerability. According to 21st Century Business Herald, citing a recent notice by the Ministry of Industry and Information Technology “Alibaba Cloud did not immediately report vulnerabilities in the popular, open-source logging framework Apache Log4j2 to China's telecommunications regulator”.This comes after, according to Reuters “The Chinese government has asked state-owned companies to migrate their data from private operators such as Alibaba and Tencent to a state-backed cloud system by next year.” From what we understand, there is no statement from Alibaba Cloud on this yet. You can read more about this here. Gartner's Report can be found here. Redhat's Report can be found here.  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast: - Cloud Security Academy:

Cloud Security News this week 12 Jan 2022 <ul> <li>UK’s financial regulators - The Prudential Regulation Authority is looking to increase it’s monitoring of Cloud providers like AWS, Azure and Google Cloud. According to Financial times, they are looking to gain more access to data from these cloud providers because the impact outages and cyberattacks have on British Banks. They are looking at implementing more robust outages and disaster recovery tests given the increasing reliance UK banks have on a handful of cloud providers. A lot of major British banks have partnerships with cloud providers “AWS has announced deals with Barclays and HSBC, while Lloyd Banking Group holds partnerships with Google Cloud and Microsoft Azure.”. There is an increasing concerns about the impacts on the banks should these cloud providers experience outages. You can view the financial times article <a href="https://www.ft.com/content/29405a47-586b-4c5a-b641-0f479b4cee1d" rel="nofollow" target="_blank">here</a></li> <li>Speaking of regulators and how they are dealing with cloud providers, a few weeks ago in December Chinese regulators have “suspended an information-sharing partnership with Alibaba Cloud Computing” over concerns that it failed to promptly report and address a cybersecurity vulnerability. According to 21st Century Business Herald, citing a recent notice by the Ministry of Industry and Information Technology “Alibaba Cloud did not immediately report vulnerabilities in the popular, open-source logging framework Apache Log4j2 to China's telecommunications regulator”.This comes after, according to Reuters “The Chinese government has asked state-owned companies to migrate their data from private operators such as Alibaba and Tencent to a state-backed cloud system by next year.” From what we understand, there is no statement from Alibaba Cloud on this yet. You can read more about this <a href="https://www.reuters.com/world/china/china-regulator-suspends-cyber-security-deal-with-alibaba-cloud-2021-12-22/" rel="nofollow" target="_blank">here.</a></li> <li>Gartner's Report can be found <a href="https://www.gartner.com/en/newsroom/press-releases/2021-08-02-gartner-says-four-trends-are-shaping-the-future-of-public-cloud" rel="nofollow" target="_blank">here.</a></li> <li>Redhat's Report can be found <a href="https://www.redhat.com/rhdc/managed-files/rh-2021-global-tech-outlook-overview-f26353-202011_0.pdf" rel="nofollow" target="_blank">here</a>.</li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>: - <a href="https://www.cloudsecuritypodcast.tv/cloud-security-academy" rel="nofollow" target="_blank">Cloud Security Academy</a>:

UK Financial Regulators monitoring Cloud Providers Closely 

Cloud Security News this week 5 Jan 2022  Google has acquired security orchestration, automation and response (SOAR) provider, Siemplify. Neither company has disclosed any amounts however sources including Reuters report Google paid $500 million for Siemplify. Google has shared that Siemplify “will join Google Cloud’s security team to help companies better manage their threat response”. They shared in their announcement that “Providing a proven SOAR capability unified with Chronicle’s innovative approach to security analytics is an important step forward in their vision”. You can find more about this here Microsoft in their updated Blog this week on this issue have noted “Exploitation attempts and testing have remained high during the last weeks of December”.  They also stated that they had “observed many existing attackers adding exploits of these vulnerabilities in their existing malware kits and tactics, from coin miners to hands-on-keyboard attacks”. Microsoft mentions that “customers should assume broad availability of exploit code and scanning capabilities to be a real and present danger to their environments. And “this is expected to have a long tail for remediation, requiring ongoing, sustainable vigilance” . Microsoft have reported that the bulk of attacks have been related to mass scanning by attackers attempting to thumbprint vulnerable systems, as well as scanning by security companies and researchers. You can read their updated blog here. Back in 2019 you probably heard about Autom Attack which targeted misconfigured docker APIs to gain network entry to  set up a backdoor on the compromised host to do cryptomining.  This cryptomining campaign has evolved in the last 3 years to improve on their defense evasion tactics to fly under the radar and avoid detection. You can see the blog and their findings here. SEGA Europe have disclosed that they were storing sensitive data in an unsecured Amazon Web Services (AWS) S3 bucket. This was discovered during a cloud-security audit. Security Researcher Aaron Phillips with VPN Overview worked with SEGA Europe to secure the exposed data. You can view the full report here Positive Security researchers have stumbled upon four vulnerabilities in Microsoft Teams. You can read more about the findings here and threatpost report here  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast: - Cloud Security Academy:

Cloud Security News this week 5 Jan 2022 <ul> <li>Google has acquired security orchestration, automation and response (SOAR) provider, Siemplify. Neither company has disclosed any amounts however sources including Reuters <a href="https://www.reuters.com/markets/deals/google-beefs-up-internet-security-with-siemplify-buyout-2022-01-04/" rel="nofollow" target="_blank">report</a> Google paid $500 million for Siemplify. Google has shared that Siemplify “will join Google Cloud’s security team to help companies better manage their threat response”. They shared in their announcement that “Providing a proven SOAR capability unified with <a href="http://chronicle.security/" rel="nofollow" target="_blank">Chronicle</a>’s innovative approach to security analytics is an important step forward in their vision”. You can find more about this <a href="https://cloud.google.com/blog/products/identity-security/raising-the-bar-in-security-operations" rel="nofollow" target="_blank">here</a></li> <li>Microsoft in their updated Blog this week on this issue have noted “Exploitation attempts and testing have remained high during the last weeks of December”.  They also stated that they had “observed many existing attackers adding exploits of these vulnerabilities in their existing malware kits and tactics, from coin miners to hands-on-keyboard attacks”. Microsoft mentions that “customers should assume broad availability of exploit code and scanning capabilities to be a real and present danger to their environments. And “this is expected to have a long tail for remediation, requiring ongoing, sustainable vigilance” . Microsoft have reported that the bulk of attacks have been related to mass scanning by attackers attempting to thumbprint vulnerable systems, as well as scanning by security companies and researchers. You can read their updated blog <a href="https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/" rel="nofollow" target="_blank">here</a>.</li> <li>Back in 2019 you probably heard about Autom Attack which targeted misconfigured docker APIs to gain network entry to  set up a backdoor on the compromised host to do cryptomining.  This cryptomining campaign has evolved in the last 3 years to improve on their defense evasion tactics to fly under the radar and avoid detection. You can see the blog and their findings <a href="https://blog.aquasec.com/attack-techniques-autom-cryptomining-campaign" rel="nofollow" target="_blank">here.</a></li> <li>SEGA Europe have disclosed that they were storing sensitive data in an unsecured Amazon Web Services (AWS) S3 bucket. This was discovered during a cloud-security audit. Security Researcher Aaron Phillips with VPN Overview worked with <a href="https://vpnoverview.com/news/sega-europe-security-report/" rel="nofollow" target="_blank">SEGA Europe to secure the exposed data</a>. You can view the full report <a href="https://vpnoverview.com/news/sega-europe-security-report/" rel="nofollow" target="_blank">here</a></li> <li>Positive Security researchers have stumbled upon four vulnerabilities in <a href="https://threatpost.com/microsoft-teams-patch-bypass-rce/158043/" rel="nofollow" target="_blank">Microsoft Teams</a>. You can read more about the findings <a href="https://positive.security/blog/ms-teams-1-feature-4-vulns" rel="nofollow" target="_blank">here</a> and threatpost report <a href="https://threatpost.com/microsoft-teams-bugs-vulnerable-march/177225/" rel="nofollow" target="_blank">here</a></li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>: - <a href="https://www.cloudsecuritypodcast.tv/cloud-security-academy" rel="nofollow" target="_blank">Cloud Security Academy</a>:

Google invests in Security + Microsoft's Log4Shell Update

Cloud Security News this week 22 December 2021  Most folks in cybersecurity have been consumed with all things Log4shell with a CVSS score of 10, since last week. Check out last week’s episode or our special feature on Log4shell on YouTube by Ashish Rajan if you want to know a bit more about how it started and what its all about So, where have things landed with it all so far. To remedy the Log4Shell vulnerability, Apache has issues several patches however with each patch, additional issues were reported. The latest patch is the third installment 2.17.0 to address a new vulnerability that allow for denial of service attacks. While apache and other organisations rush to remedy and patch these vulnerabilities, an explosion of attacks continue.  Belgium’s defence ministry revealed that it had been forced to shut down parts of its network after a hacker group exploited log4j to gain entry to its systems. Security firm Check Point has been monitoring the situation and, at one point, reported seeing more than 100 Log4J attacks per minute.The hackers are scattered globally. Checkpoint further reported that more than half of the exploits come from well-known hacking groups using it to deploy common malware like Tsunami and Mirai. Sentinel one has reported that “Observed exploit attempts in the wild thus far have led to commodity cryptominer payloads or other known and commodity post-exploitation methods. They expect further opportunistic abuse by a wide variety of attackers, including ransomware and nation-state actors.” The latest apache update is available here. The SentinelOne blog is available here and Checkpoint blog is available here, Whilst we are scrambling to stay on top log4Shell, a few exciting things have occurred in the world of Cloud Security as well, Ermetic announced a $70 million series B funding round. Their platform secures cloud infrastructure by focusing on identity security and reducing the attack surface across a multi-cloud deployment. The platform is expanding its support for Kubernetes container orchestration which they refer to  like the fourth cloud. Learn more about Ermetic here. And in other news Container and cloud security unicorn Sysdig   scored $350 million in a Series G funding. This raises their total funding to $744 million and pushes valuation to $2.5 billion. Sysdig offers security and performance monitoring services tailored toward cloud-native applications and are looking to utilise the latest funding to accelerate the expansion of these services into new markets, increase its headcount and customer base, and invest in research and development. Learn more about Sysdig here  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast: - Cloud Security Academy:

Cloud Security News this week 22 December 2021 <ul> <li>Most folks in cybersecurity have been consumed with all things Log4shell with a CVSS score of 10, since last week. Check out last week’s episode or our special feature on Log4shell on YouTube by Ashish Rajan if you want to know a bit more about how it started and what its all about So, where have things landed with it all so far.</li> <li>To remedy the Log4Shell vulnerability, Apache has issues several patches however with each patch, additional issues were reported. The latest patch is the third installment 2.17.0 to address a new vulnerability that allow for denial of service attacks. While apache and other organisations rush to remedy and patch these vulnerabilities, an explosion of attacks continue.  Belgium’s defence ministry <a href="https://www.wsj.com/articles/hackers-exploit-log4j-flaw-at-belgian-defense-ministry-11640020439" rel="nofollow" target="_blank">revealed that</a> it had been forced to shut down parts of its network after a hacker group exploited log4j to gain entry to its systems. Security firm Check Point has been <a href="https://blog.checkpoint.com/2021/12/13/the-numbers-behind-a-cyber-pandemic-detailed-dive/" rel="nofollow" target="_blank">monitoring</a> the situation and, at one point, reported seeing more than 100 Log4J attacks per minute.The hackers are scattered globally. Checkpoint further reported that more than half of the exploits come from well-known hacking groups using it to deploy common malware like Tsunami and Mirai. Sentinel one has reported that “Observed exploit attempts in the wild thus far have led to commodity cryptominer payloads or other known and commodity post-exploitation methods. They expect further opportunistic abuse by a wide variety of attackers, including ransomware and nation-state actors.”</li> <li>The latest apache update is available <a href="https://logging.apache.org/log4j/2.x/download.html" rel="nofollow" target="_blank">here</a>. The SentinelOne blog is available <a href="https://www.sentinelone.com/blog/cve-2021-44228-staying-secure-apache-log4j-vulnerability/" rel="nofollow" target="_blank">here</a> and Checkpoint blog is available <a href="https://blog.checkpoint.com/2021/12/11/protecting-against-cve-2021-44228-apache-log4j2-versions-2-14-1/" rel="nofollow" target="_blank">here</a>,</li> <li>Whilst we are scrambling to stay on top log4Shell, a few exciting things have occurred in the world of Cloud Security as well, Ermetic announced a $70 million series B funding round. Their platform secures cloud infrastructure by focusing on identity security and reducing the attack surface across a multi-cloud deployment. The platform is expanding its support for Kubernetes container orchestration which they refer to  like the fourth cloud. Learn more about Ermetic <a href="https://ermetic.com/" rel="nofollow" target="_blank">here</a>.</li> <li>And in other news Container and cloud <a href="https://www.sdxcentral.com/security/definitions/what-is-software-defined-security/" rel="nofollow" target="_blank">security</a> unicorn Sysdig   scored $350 million in a Series G funding. This raises their total funding to $744 million and pushes valuation to $2.5 billion. Sysdig offers security and performance monitoring services tailored toward cloud-native applications and are looking to utilise the latest funding to accelerate the expansion of these services into new markets, increase its headcount and customer base, and invest in research and development. Learn more about Sysdig <a href="https://sysdig.com/" rel="nofollow" target="_blank">here</a></li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>: - <a href="https://www.cloudsecuritypodcast.tv/cloud-security-academy" rel="nofollow" target="_blank">Cloud Security Academy</a>:

The Latest with Log4J

Cloud Security News this week 15 December 2021  This week, the world of cybersecurity has been consumed by the Log4Shell vulnerability. So whats it all about.  Log4j is a  Java library for logging error messages in applications. It was  developed by the open-source Apache Software Foundation and is a key Java-logging framework. The critical zero day security vulnerability has been named ‘Log4Shell’ and has a maximum CVSS ( Common Vulnerability Scoring System ) score of 10. The zero-day had been exploited at least nine days before it surfaced on Thursday. This vulnerability puts any device connected to the internet and running Apache Log4J, versions 2.0 to 2.14.1.at risk. This impacts cloud services, developer services, security devices, mapping services, and more. AWS has released details on how the flaw impacts its services and said it is working on patching its services that use Log4j and has released mitigations for services like CloudFront. This can be viewed here. Microsoft has also released Guidance for preventing, detecting, and hunting for Log4j  exploitation here and Google  cloud is also “is actively following the security vulnerability” and  has released recommendations for investigating and responding to the Apache “Log4j 2” vulnerability here IBM said it is "actively responding" to the Log4j vulnerability across IBM's own infrastructure and its products, can be found here and Oracle has issued a patch too here. There is a comprehensive list of  all known softwares vulnerable and not vulnerable to LogShell is available on GitHub along with any known fixes. Here This vulnerability is being exploited to install malware, crypto mining, perform DDOS attacks, drop Cobalt Strike beacons, scan for vulnerable servers and exfiltrate information. To finish on a note other log4J - Have you heard about Dazz? Well if you haven't, they are a one-year old cloud security remediation startup that recently closed another round of funding and raised 60 million dollars. Dazz is looking to automate cloud security through their AI driven product in a developer friendly way. You can find out more about them hereEpisode Show Notes on Cloud Security Podcast Website.  Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast: - Cloud Security Academy:

Cloud Security News this week 15 December 2021 <ul> <li>This week, the world of cybersecurity has been consumed by the Log4Shell vulnerability. So whats it all about.  Log4j is a  Java library for logging error messages in applications. It was  developed by the open-source Apache Software Foundation and is a key Java-logging framework. The critical zero day security vulnerability has been named ‘Log4Shell’ and has a <a href="https://logging.apache.org/log4j/2.x/security.html" rel="nofollow" target="_blank">maximum CVSS ( Common Vulnerability Scoring System ) score of 10</a>. The zero-day had been exploited at least <a href="https://twitter.com/eastdakota/status/1469800951351427073" rel="nofollow" target="_blank">nine days before it surfaced</a> on Thursday. This vulnerability puts any device connected to the internet and running Apache Log4J, versions 2.0 to <a href="http://2.14.1.at" rel="nofollow" target="_blank">2.14.1.at</a> risk. This impacts cloud services, developer services, security devices, mapping services, and more.</li> <li>AWS has released details on how the flaw impacts its services and said it is <a href="https://aws.amazon.com/security/security-bulletins/AWS-2021-005/" rel="nofollow" target="_blank">working on patching its services</a> that use Log4j and has released mitigations for services like CloudFront. This can be viewed <a href="https://aws.amazon.com/security/security-bulletins/AWS-2021-005/" rel="nofollow" target="_blank">here.</a> Microsoft has also released Guidance for preventing, detecting, and hunting for Log4j  exploitation <a href="https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/" rel="nofollow" target="_blank">here</a> and Google  cloud is also “is actively following the security vulnerability” and  has released recommendations for investigating and responding to the Apache “Log4j 2” vulnerability <a href="https://cloud.google.com/blog/products/identity-security/recommendations-for-apache-log4j2-vulnerability" rel="nofollow" target="_blank">here</a> IBM <a href="https://www.ibm.com/blogs/psirt/an-update-on-the-apache-log4j-cve-2021-44228-vulnerability/" rel="nofollow" target="_blank">said</a> it is "actively responding" to the Log4j vulnerability across IBM's own infrastructure and its products, can be found <a href="https://www.ibm.com/blogs/psirt/an-update-on-the-apache-log4j-cve-2021-44228-vulnerability/" rel="nofollow" target="_blank">here </a>and Oracle has issued a patch too <a href="https://www.oracle.com/security-alerts/alert-cve-2021-44228.html" rel="nofollow" target="_blank">here</a>. There is a comprehensive list of  all known softwares vulnerable and not vulnerable to LogShell is available on GitHub along with any known fixes.<a href="https://github.com/NCSC-NL/log4shell/tree/main/software" rel="nofollow" target="_blank"> Here</a></li> <li>This vulnerability is being exploited to install malware, crypto mining, perform DDOS attacks, drop Cobalt Strike beacons, scan for vulnerable servers and exfiltrate information.</li> <li>To finish on a note other log4J - Have you heard about Dazz? Well if you haven't, they are a one-year old cloud security remediation startup that recently closed another round of funding and raised 60 million dollars. Dazz is looking to automate cloud security through their AI driven product in a developer friendly way. You can find out more about them <a href="https://www.dazz.io/" rel="nofollow" target="_blank">here</a>Episode Show Notes on <a href="https://www.cloudsecuritypodcast.tv/" rel="nofollow" target="_blank">Cloud Security Podcast Website</a>.</li> </ul> Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>: - <a href="https://www.cloudsecuritypodcast.tv/cloud-security-academy" rel="nofollow" target="_blank">Cloud Security Academy</a>:

The Log4j Vulnerability - Cloud Providers Respond

Cloud Security News this week 8 December 2021  If you use AWS, you may have noticed some issues with your services this week. AWS reported on Tuesday morning that they were seeing impacts to multiple APIs in the US-East 1 region. The issues were impacting their monitoring and incident response tooling impacting their ability to provide timely updates. A bit later they reported that they had identified the root cause of the issue causing service API and console issues. Root logins for consoles in all AWS regions were affected by this issue, however customers could  login to consoles other than US-EAST-1 by using an IAM role for authentication. Services impacted include: EC2, Connect, DynamoDB, Glue, Athena, Timestream, and Chime. Most of the services have now recovered and all updates can be viewed here Recently McAfee and FireEye announced the availability of new cloud security capabilities on Amazon Web Services (AWS) as well as integration with the Amazon Inspector vulnerability management service. According to McAfee Enterprise and FireEye, their behavior analysis and machine-learning extended detection and response (XDR) capabilities combined with Amazon Inspector promises to deliver AWS customers greater visibility and protection of cloud-based applications and data. The research team at LightSpin discovered that the Jupiter Notebook instance of SageMaker could reach the Notebook Instance metadata endpoint. For context, having access to the metadata endpoint and requesting access tokens from an over-permissive IAM Role is a very well known SSRF vulnerability in AWS. In this case, the research team reported their finding to AWS and this has been resolved since. You can learn more about this here Zscaler, an  American cloud-based information security company known for their Zscaler private and internet access and now the creators of Zero Trust Exchange platform have now announced the general availability of its new Workload Communications solution, which is part of the Zscaler Zero Trust Exchange. This extends Zero Trust security to workloads and applications hosted in public cloud to eliminate attack surfaces, prevent lateral threat movement, inhibit compromise of workloads, and stop data loss. It also helps IT teams simplify multi-cloud workload connectivity by moving away from traditional IP-based routing and VPNs between cloud environments to expedite enterprises' cloud transformation initiatives. You can learn more about this here.  Episode Show Notes on Cloud Security Podcast Website. Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News  If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - Cloud Security Podcast: - Cloud Security Academy:

Cloud Security News this week 8 December 2021 <ul> <li>If you use AWS, you may have noticed some issues with your services this week. AWS reported on Tuesday morning that they were seeing impacts to multiple APIs in the US-East 1 region. The issues were impacting their monitoring and incident response tooling impacting their ability to provide timely updates. A bit later they reported that they had identified the root cause of the issue causing service API and console issues. Root logins for consoles in all AWS regions were affected by this issue, however customers could  login to consoles other than US-EAST-1 by using an IAM role for authentication. Services impacted include: EC2, Connect, DynamoDB, Glue, Athena, Timestream, and Chime. Most of the services have now recovered and all updates can be viewed <a href="https://status.aws.amazon.com/" rel="nofollow" target="_blank">here</a></li> <li>Recently McAfee and FireEye announced the availability of new cloud security capabilities on <a href="https://www.scmagazine.com/news/security-news/cloud-security/aws-configuration-issues-lead-to-exposure-of-5-million-records" rel="nofollow" target="_blank">Amazon Web Services</a> (AWS) as well as integration with the Amazon Inspector vulnerability management service. According to McAfee Enterprise and FireEye, their behavior analysis and machine-learning extended detection and response (XDR) capabilities combined with Amazon Inspector promises to deliver AWS customers greater visibility and protection of cloud-based applications and data.</li> <li>The research team at LightSpin discovered that the Jupiter Notebook instance of SageMaker could reach the Notebook Instance metadata endpoint. For context, having access to the metadata endpoint and requesting access tokens from an over-permissive IAM Role is a very well known SSRF vulnerability in AWS. In this case, the research team reported their finding to AWS and this has been resolved since. You can learn more about this<a href="https://blog.lightspin.io/aws-sagemaker-notebook-takeover-vulnerability" rel="nofollow" target="_blank"> here</a></li> <li><a href="https://www.globenewswire.com/Tracker?data=48hPREhYzdi7JL2BRgg_vhZRCQ6s_euhhbhWbhLeKj09yBh6AgNqe5hnuIx90bi_xxiXqmh0CVUYmMC-ekoYMA==" rel="nofollow" target="_blank">Zscaler</a>, an  American <a href="https://en.wikipedia.org/wiki/Cloud-based" rel="nofollow" target="_blank">cloud-based</a> <a href="https://en.wikipedia.org/wiki/Information_security" rel="nofollow" target="_blank">information security</a> company known for their Zscaler private and internet access and now the creators of Zero Trust Exchange platform have now announced the general availability of its new Workload Communications solution, which is part of the Zscaler Zero Trust Exchange. This extends Zero Trust security to workloads and applications hosted in public cloud to eliminate attack surfaces, prevent lateral threat movement, inhibit compromise of workloads, and stop data loss. It also helps IT teams simplify multi-cloud workload connectivity by moving away from traditional IP-based routing and VPNs between cloud environments to expedite enterprises' cloud transformation initiatives. You can learn more about this <a href="https://www.zscaler.com/" rel="nofollow" target="_blank">here.</a></li> </ul> Episode Show Notes on <a href="https://www.cloudsecuritypodcast.tv/" rel="nofollow" target="_blank">Cloud Security Podcast Website</a>. Podcast Twitter - Cloud Security Podcast (<a href="https://www.twitter.com/CloudSecPod" rel="nofollow" target="_blank">@CloudSecPod</a>) Instagram - <a href="https://www.instagram.com/cloudsecuritynews/" rel="nofollow" target="_blank">Cloud Security News </a> If you want to watch videos of this LIVE STREAMED episode and past episodes, check out: - <a href="https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1" rel="nofollow" target="_blank">Cloud Security Podcast</a>: - <a href="https://www.cloudsecuritypodcast.tv/cloud-security-academy" rel="nofollow" target="_blank">Cloud Security Academy</a>:

AWS Outage - What is impacted?

Your weekly digest of what you need to know in the world of Cloud Security. We do the hard work for you, so you are always across the important bits.     Brought to you by the team behind the much loved Cloud Security Podcast

Cloud Security News

The best podcast episodes on non-current politics. Covering topics such as universal basic income, democracy, poverty & justice and more. For anyone interested in learning more about politics that affect that world, not just now, but in the longer term. Add episodes you're interested into your queue below!

Best Non-Current Politics Podcasts

The best podcast episodes on parenting. Interviewing experts and talking through common issues surrounding parenting. This topic is filled with important lessons and insights for anyone listening. Add episodes you're interested into your queue below!