Security News
StrongBox IT released its flagship application firewall - Modshield SB, now available in the AWS Marketplace on a cloud subscription model and a Bring Your Own License model. A feature-rich, scalable and cost-effective application firewall, Modshield SB is designed to provide protection against all major attack vectors.
Misconfigured AWS S3 storage buckets exposing massive amounts of data to the internet are like an unexploded bomb just waiting to go off, say experts. The team at Truffle Security said its automated search tools were able to stumble across some 4,000 open Amazon-hosted S3 buckets that included data companies would not want public - things like login credentials, security keys, and API keys.
Amazon Web Services on Tuesday announced the general availability of a fully managed service designed to help customers identify potentially fraudulent online activities. Leveraging machine learning, the Amazon Fraud Detector can spot payment and identity fraud almost instantly.
With this announcement, InfluxDB Cloud is now live on all three major cloud platforms - Microsoft Azure, Google Cloud and Amazon Web Services. InfluxDB Cloud now available on all major cloud platforms.
ISO-certified secure provisioning services for the PSoC 64 Standard Secure AWS MCU are offered by Arrow Electronics, enabling OEMs to securely deploy IoT applications at scale. "As the newest component of our IoT-AdvantEdge solutions, the PSoC 64 Standard Secure AWS MCU eliminates design risks, and directly addresses the cost-of-ownership issues that development teams face when building their secure device management service."
Twilio today confirmed one or more miscreants sneaked into its unsecured cloud storage systems and modified a copy of the JavaScript SDK it shares with its customers. In short, someone was able to get into Twilio's Amazon Web Services S3 bucket, which was left unprotected and world-writable, and alter the TaskRouter v1.20 SDK to include "Non-malicious" code that appeared designed primarily to track whether or not the modification worked.
Twilio today confirmed one or more miscreants sneaked into its unsecured cloud storage systems and modified a copy of the JavaScript SDK it shares with its customers. In short, someone was able to get into Twilio's Amazon Web Services S3 bucket, which was left unprotected and world-writable, and alter the TaskRouter v1.20 SDK to include "Non-malicious" code that appeared designed primarily to track whether or not the modification worked.
Amazon Web Services, an Amazon.com company, announced the general availability of AWS IoT SiteWise, a managed service that collects data from the plant floor, structures and labels the data, and generates real-time key performance indicators and metrics to help industrial customers make better, data-driven decisions. Customers can use SiteWise to monitor operations across facilities, quickly compute industrial performance metrics, create applications that analyze industrial equipment data to prevent costly equipment issues, and reduce gaps in production.
The cloud native core banking technology firm, has announced that its core banking platform Vault now runs on every major cloud infrastructure provider including Google Cloud Platform, Amazon Web Services, Microsoft Azure and IBM Cloud. Vault can be deployed on either the bank's choice of cloud provider, on premise, in a hybrid cloud using OpenShift from Red Hat, or as a SaaS product.
Paul Bischoff, consumer privacy expert with Comparitech, found that Amazon's face recognition platform incorrectly misidentified more than 100 photos of US and UK lawmakers as criminals. Rekognition, Amazon's cloud-based facial recognition platform that was first launched in 2016, has been sold and used by a number of United States government agencies, including ICE and Orlando, Florida police, as well as private entities.