The 2019 State of Cloud Security
Dark Reading
MAY 3, 2019
Enterprise cloud security is making real progress, but emerging technologies call for security teams to keep up the pace.
cloud-security the-2019-state-of-cloud-security 
At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software
Krebs on Security
MARCH 5, 2021
On March 2, Microsoft released emergency security updates to plug four security holes in Exchange Server versions 2013 through 2019 that hackers were actively using to siphon email communications from Internet-facing systems running Exchange. Microsoft’s initial advisory about the Exchange flaws credited Reston, Va.
Cleanup 
363
363 Join 55,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
GUEST ESSAY: Securely managing access controls is vital to preserving the privacy of healthcare data
The Last Watchdog
NOVEMBER 8, 2021
There’s no doubt, the increasing use of telemedicine, the explosion of health-based cloud apps, and innovative medical IoT devices are improving the patient care experience. However, healthcare data ranks at the top of the list for needing improvements in security and privacy protections. Patient data exposures.
Access 294
294 
The Not-so-True People-Search Network from China
Krebs on Security
MARCH 20, 2024
It’s not unusual for the data brokers behind people-search websites to use pseudonyms in their day-to-day lives (you would, too). Some of these personal data purveyors even try to reinvent their online identities in a bid to hide their conflicts of interest. net , KrebsOnSecurity began poking around. What are the odds?
Marketing 240
240 
NUVOLA: the new Cloud Security tool
Security Affairs
SEPTEMBER 28, 2022
nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments. nuvola is the new open source security tool made by the Italian cyber security researcher Edoardo Rosa ( @_notdodo_ ), Security Engineer at Prima Assicurazioni. Cloud Security Context.
Cloud 101
101 
Norton 360 Now Comes With a Cryptominer
Krebs on Security
JANUARY 6, 2022
Norton’s parent firm says the cloud-based service that activates the program and allows customers to profit from the scheme — in which the company keeps 15 percent of any currencies mined — is “opt-in,” meaning users have to agree to enable it. ” Norton 360 is owned by Tempe, Ariz.-based
Mining 324
324 
Anonymous Sudan launched a DDoS attack against Telegram
Security Affairs
SEPTEMBER 12, 2023
Its these type of spiteful, vengeful attacks that put doubt on the state controlled narrative of the group. Its these type of spiteful, vengeful attacks that put doubt on the state controlled narrative of the group. However, some security researchers believe that Anonymous Sudan is a sub-group of the Pro-Russian threat group Killnet.
Cloud 119
119 
Breach at Cloud Solution Provider PCM Inc.
Krebs on Security
JUNE 27, 2019
based cloud solution provider, allowed hackers to access email and file sharing systems for some of the company’s clients, KrebsOnSecurity has learned. based PCM [ NASDAQ:PCMI ] is a provider of technology products, services and solutions to businesses as well as state and federal governments. A digital intrusion at PCM Inc. ,
Cloud 239
239 
ESET PROTECT Advanced Review: Features & Benefits
eSecurity Planet
OCTOBER 8, 2021
And like other old-guard companies, ESET knows it needs to innovate to stay competitive, which the company has done with its cloud-based endpoint protection platform, ESET PROTECT. Administrators can quickly deploy ESET and configure policies to meet network security objectives through the cloud-based management console.
Encryption 115
115 
US OCC imposed an $80 Million fine to Capital One for 2019 hack
Security Affairs
AUGUST 9, 2020
US Office of the Comptroller of the Currency (OCC) regulator has fined the credit card provider Capital One Financial Corp with $80 million over 2019 data breach. The US Office of the Comptroller of the Currency (OCC) has imposed an $80 million fine to the credit card provider Capital One Financial Corp over 2019 data breach.
BOOK REVIEW: ‘Security Yearbook’ preserves cybersecurity history — highlights tectonic shift
The Last Watchdog
FEBRUARY 24, 2020
Related: The role of PKI is securing digital transformation That was in 2002. I recently had a chance to have a rich discussion about the state of cybersecurity with Stiennon, the occasion being him sending me a copy of his new book: Security Yearbook 2020: A History and Directory of the IT Security Industry.
Cybersecurity 126
126 
Payroll Provider Gives Extortionists a Payday
Krebs on Security
FEBRUARY 23, 2019
based Apex HCM is a cloud-based payroll software company that serves some 350 payroll service bureaus that in turn provide payroll services to small and mid-sized businesses. The company quickly took all of its systems offline, and began notifying customers that it was trying to remediate a security threat. Roswell, Ga.
Ransomware 220
220 
IoT and Quantum Computing’s Impact on the Federal Government
Thales Cloud Protection & Licensing
SEPTEMBER 17, 2019
As government agencies get back to work after summer barbeques, family vacations and once-in-a-lifetime getaways, the focus is on the priorities for the rest of 2019. The focus on the rest of 2019 and looking ahead to 2020 was very clear when I attended two recent industry events. The Continued Impact of IoT. In fact, the U.S.
IoT 101
101 
SHARED INTEL: Bogus Coronavirus email alerts underscore risk posed by weaponized email
The Last Watchdog
MARCH 12, 2020
market in 2019. It comes as no surprise that top cyber crime rings immediately pounced on the Coronavirus outbreak to spread a potent strain of malware via malicious email and web links. I had the chance to visit with Votiro CEO and founder Aviv Grafi at RSA 2020. For a full drill down give a listen to the accompanying podcast.
Risk 150
150 
Federal cybersecurity: breaking down the barriers to adoption
Thales Cloud Protection & Licensing
MAY 1, 2019
Over the last two election cycles, we’ve seen an increased focus on election security, hacking and fraud. While many state and government officials are under no illusion that they are safe from a digital attack, concern should run deeper than election integrity. Security measures continue to be more reactive than proactive.
Cybersecurity 105
105 
Is your enterprise content secure to the Core?
OpenText Information Management
APRIL 30, 2019
The benefits of moving to the cloud are clear: Cloud-based offerings reduce the time it takes to get to market, provide scalability, reduce capital investment, and drive innovation. appeared first on OpenText Blogs.
Security 73
73 
The Necessity of Data Security: Recapping the 2019 Thales Data Security Summit
Thales Cloud Protection & Licensing
MAY 14, 2019
Digital transformation is driving IT modernization, IoT, and cloud migrations at a record pace in the federal government. The ability to narrow the gap between taking advantage of digital transformation without compromising security was a reoccurring theme at our 2019 annual Data Security Summit on May 1. are discovered.
Rackspace: Play Ransomware gang used a previously unknown exploit to access its Hosted Exchange email environment
Security Affairs
JANUARY 6, 2023
Cloud services provider Rackspace confirmed that the recent data breach was the result of the Play Ransomware gang’s attack. Cloud services provider Rackspace announced this week that the recent data breach was the result of an attack conducted by the Play ransomware group. ” reads an update provided by the company.
Ransomware 90
90 
Latest on the SVR’s SolarWinds Hack
Schneier on Security
JANUARY 5, 2021
But as businesses like Amazon and Microsoft that provide cloud services dig deeper for evidence, it now appears Russia exploited multiple layers of the supply chain to gain access to as many as 250 networks. There is also no indication yet that any human intelligence alerted the United States to the hacking.
GUEST ESSAY: Going beyond watermarks to protect sensitive documents from illegal access
The Last Watchdog
JANUARY 6, 2022
Related: Why the ‘Golden Age’ of cyber espionage is upon us. The global threat intelligence market size was estimated at $10.9 billion in 2020 and will grow to $16.1 billion by 2025. Yet, according to the study by the Ponemon Institute, the number of insider leaks has increased by 47 percent in 2020 compared to 2018. Demyanchuk.
Access 266
266 
Breached Data Indexer ‘Data Viper’ Hacked
Krebs on Security
JULY 13, 2020
Data Viper , a security startup that provides access to some 15 billion usernames, passwords and other information exposed in more than 8,000 website breaches, has itself been hacked and its user database posted online. The apparent breach at St. An online post by the attackers who broke into Data Viper.
Sales 342
342 
DocuWare Enjoys Banner 2019
Info Source
FEBRUARY 12, 2020
2019 was a busy year for DocuWare. Through all this change, two elements of DocuWare’s business remained stable: its focus on the cloud and on cultivating its reseller channel. Through all this change, two elements of DocuWare’s business remained stable: its focus on the cloud and on cultivating its reseller channel.
ECM 78
78 
Ransomware Bites 400 Veterinary Hospitals
Krebs on Security
NOVEMBER 19, 2019
based NVA bills itself as is the largest private owner of freestanding veterinary hospitals in the United States. The company’s Web site says it currently owns roughly 700 veterinary hospitals and animal boarding facilities in the United States, Canada, Australia and New Zealand. No one closed their doors.”
Ransomware 216
216 
Organizations Struggle with Cloud Security in the Post Digital Transformation Era – Highlights from our 2020 Data Threat Report-Global Edition
Thales Cloud Protection & Licensing
FEBRUARY 24, 2020
In previous years, we have discussed the efforts of businesses to digitally transform their processes to maintain or gain a competitive advantage and many of these transformative technologies involves moving to the cloud. Whatever the nature of the data stored in the cloud, it needs to be secured.
Maintaining Data Security Integrity and Trust Infrastructure with Remote IT
Thales Cloud Protection & Licensing
APRIL 14, 2020
As a result, companies around the globe are doing everything they can to maintain a “business as usual” pace so there is minimal disruption, even if it means relaxing security processes and quickly adopting new tools that may create new risks. A 2019 survey of full time workers in the U.S.
IT 79
79 More than 2 million Apache HTTP servers still affected by CVE-2019-0211 flaw
Security Affairs
APRIL 5, 2019
Security experts at Rapid7 have discovered that over 2 million Apache HTTP servers are still affected by the CVE-2019-0211 critical privilege escalation flaw. According to an analysis conducted by Rapid7, more than 2,000,000 servers, many on public cloud platforms, are still running vulnerable versions of Apache.
Cloud 107
107 
UK, US agencies warn of large-scale brute-force attacks carried out by Russian APT
Security Affairs
JULY 1, 2021
US and UK cybersecurity agencies said today that a Russian military cyber unit has been behind a series of brute-force attacks that have targeted the cloud IT resources of government and private sector companies across the world. and foreign organizations using brute force access to penetrate government and private sector victim networks.”
Intern caused ‘solarwinds123’ password leak, former SolarWinds CEO says
Security Affairs
MARCH 1, 2021
The issue was addressed on November 22, 2019. In December, Security researcher Vinoth Kumar revealed he notified the company of a publicly accessible GitHub repository that was leaking the FTP credentials of the company’s download website in the clear text.
Passwords 103
103 
Russia-linked APT28 has been scanning vulnerable email servers in the last year
Security Affairs
MARCH 20, 2020
According to security researchers from Trend Micro, the Russia-linked APT28 cyberespionage group has been scanning vulnerable email servers for more than a year. The nation-state hackers are scanning the entire internet, in search of vulnerable webmail and Microsoft Exchange Autodiscover servers that expose TCP ports 445 and 1433.
Phishing 143
143 
New enhanced Joker Malware samples appear in the threat landscape
Security Affairs
JULY 16, 2021
Since 2019 experts found many Joker apps on Google Play store, in September 2019 security experts at Google removed from the store 24 apps. Since 2019 experts found many Joker apps on Google Play store, in September 2019 security experts at Google removed from the store 24 apps.
Encryption 141
141 
Twilio hackers also breached the food delivery firm DoorDash
Security Affairs
AUGUST 27, 2022
” reads a security notice published by the company. ” reads a security notice published by the company. The notice states that for a small subset of customers, the threat actors accessed basic order information and partial credit card information, including the card type and the last four digits of the card number.
Homomorphic Encryption Makes Real-World Gains, Pushed by Google, IBM, Microsoft
eSecurity Planet
JUNE 24, 2021
The increasing mobility of data, as it ping-pongs between clouds, data centers and the edge, has made it an easier target of cybercrime groups, which has put a premium on the encryption of that data in recent years. Since then, interest in fully homomorphic encryption (FHE) has increased, largely paralleling the rise of cloud computing.
Encryption 85
85 
Healthcare Organizations Need to Adapt Their Data Protection Policies to the New Threat Environment
Thales Cloud Protection & Licensing
NOVEMBER 16, 2020
Given this, healthcare organizations need to advance their security efforts to adapt to this shifting environment. and GDPR in the EU dictating strong security controls for safeguarding medical data and sensitive personal patient data. Healthcare Organizations Need to Adapt Their Data Protection Policies to the New Threat Environment.
e-Records 2019: Data Protection and Information Governance Across Data Silos
The Texas Record
DECEMBER 16, 2019
Commvault’s Senior Director of Engineering, David Langley, presented “Data Protection and Information Governance Across Data Silos” at the e-Records 2019 Conference on November 15, 2019. Langley recommends using secure cloud storage as part of your government’s disaster recovery plan.
EU has imposed sanctions on foreign actors for the first time ever
Security Affairs
JULY 31, 2020
For the first-ever time, the EU has imposed economical sanctions on Russia, China, and North Korea following cyber-attacks aimed at the EU and its member states. ” states the Council of the European Union.” “The sanctions imposed include a travel ban and an asset freeze.
Military 102
102 
Reading the 2020 Cost of a Data Breach Report
Security Affairs
AUGUST 3, 2020
from the 2019 study. This year the researchers analyzed 524 breaches that occurred between August 2019 and April 2020, in organizations of all sizes, across 17 geographies and 17 industries. from the 2019 study. The report for the first time explores the cost impact of remote work and the security skills shortage.
Data breaches 120
120 
Recently Cloud Atlas used a new piece of polymorphic malware
Security Affairs
AUGUST 12, 2019
Cloud Atlas threat actors used a new piece of polymorphic malware in recent attacks against government organizations. The Cloud Atlas cyberespionage group, aka Inception, continues to carry out attacks against government organizations and was observed using a new piece of polymorphic malware dubbed VBShower.
Cloud 85
85 
Multi-cloud use by healthcare providers puts patient data at risk
Thales Cloud Protection & Licensing
JULY 25, 2019
healthcare organizations are nearly universal in the adoption of digital transformation technologies (cloud, SaaS applications, big data, IoT, digital payments, containers, and blockchain). And the cloud is arguably the most daunting of these environments, and the most widely deployed. The highest of any vertical that we measured.
Cloud 66
66 
SEC announces sanctions against entities over email account hacking
Security Affairs
SEPTEMBER 1, 2021
Securities and Exchange Commission (SEC) announced sanctions against several organizations over email account hacking. Securities and Exchange Commission (SEC) announced sanctions against eight entities belonging to three companies over email account hacking due to cybersecurity failures.
Massive attacks bypass MFA on Office 365 and G Suite accounts via IMAP Protocol
Security Affairs
MARCH 17, 2019
Threat actors targeted Office 365 and G Suite cloud accounts using the IMAP protocol to bypass multi-factor authentication (MFA). Over the past months, threat actors have targeted Office 365 and G Suite cloud accounts using the IMAP protocol to bypass multi-factor authentication (MFA). ” reads the study published by Proofpoint.
Phishing 112
112 
SHARED INTEL: Forrester poll – security decision makers report breaches escalated as Covid 19 spread
The Last Watchdog
FEBRUARY 23, 2021
Related: Can ‘SASE’ help companies secure connectivity? In its summary report – The State of Network Security, 2020 To 2021 —Forrester combined findings derived from several surveys the firm conducted during the course of last year; Forrester polled security decision makers in organizations across North America and Europe.
Security 131
131 Google outages in Eastern US affected Gmail, G-Suite, YouTube, and more
Security Affairs
JUNE 2, 2019
Network problems on the East Coast of the US caused massive outages in Google Cloud and the Google Compute Engine, impacting all the services that rely on them. “We continue to experience high levels of network congestion in the eastern USA, affecting multiple services in Google Cloud, G Suite and YouTube. .
Cloud 81
81 
Threat Group Continuously Updates Malware to Evade Antivirus Software
eSecurity Planet
NOVEMBER 7, 2022
Kaspersky researchers recently found evidence of an advanced threat group continuously updating its malware to evade security products, similar to a release cycle for developers. LODEINFO has been observed engaged in a spear- phishing campaign since December 2019 by JPCERT/CC. Can Security Tools Stop Evolving Threats?
European Commission proposes reinforcement of EU Cybersecurity rules
DLA Piper Privacy Matters
JANUARY 11, 2021
On 16 December 2020, the European Commission adopted a proposal for a Directive on measures for a high common level of cybersecurity across the Union (“NIS II Directive”) that revises the current Directive on Security of Network and Information Systems (“NIS Directive”). Extended scope. Extended scope.
Let's personalize your content