cloud

As organizations accelerate their digital transformation initiatives and migrate to cloud environments, securing cloud-native applications has become increasingly complex and challenging. Traditional security approaches designed for on-premises infrastructures often fall short in addressing the dynamic nature of modern cloud...

Cloud Security Posture Management (CSPM) has emerged as an essential component in the modern CISO's security arsenal. As organizations increasingly adopt cloud-first strategies, the complexity of managing security across dynamic, multi-cloud environments presents unprecedented challenges. CISOs today must balance the...

Security researchers have uncovered a sophisticated malware campaign targeting users of the Python Package Index (PyPI), Python's official third-party software repository.  This latest attack vector involves several malicious packages disguised as time-related utilities, which are actually designed to steal sensitive...

New research reveals that threat actors are exploiting exposed cloud credentials to hijack enterprise AI systems within minutes of credential leakage. Recent incidents have demonstrated that attackers can compromise large language model (LLM) infrastructure in under 19 minutes.  Dubbed LLMjacking,...

When it comes to protecting your website from cyber threats, Web Application Firewalls (WAF) are an essential part of the security infrastructure. Two popular options in the market are SafeLine and CloudFlare, each with its own strengths and weaknesses. In...

Author: Olajide Shobowale Data is the lifeblood of every organization. With customers now demanding limitless access to information, enterprises are increasingly leveraging machine learning, analytics, data lakes, and IoT to drive smarter decisions. Yet a critical challenge persists: how to efficiently...

A critical security configuration in Azure Key Vault has been discovered, potentially allowing users with the Key Vault Contributor role to access sensitive data contrary to Microsoft's documented intentions. This finding, reported by Datadog to Microsoft Security Research Center (MSRC),...

A sophisticated phishing campaign targeting European companies. The attack, which peaked in June 2024, aims to harvest Microsoft Azure cloud credentials and compromise victims' cloud infrastructure. The campaign primarily targets automotive, chemical, and industrial compound manufacturing companies in Germany and...

Researchers uncovered new security vulnerabilities in the Azure Data Factory Apache Airflow integration dubbed “Dirty DAG”, which allow attackers to get unauthorized write permissions to a directed acyclic graph (DAG) file or use a compromised service principal. The vulnerabilities can...

The state-sponsored cyber threat group BlueAlpha has been active since at least 2014 and has recently upgraded its malware delivery system to leverage Cloudflare Tunnels to stage GammaDrop malware.  BlueAlpha has been observed employing spear phishing to distribute malicious HTML...