Security News

Wiz and Apiiro partner to provide context-driven security from code to cloud
2023-12-19 14:00

Apiiro, a leading application security posture management solution, today announced its partnership with Wiz, the leading cloud security company and Cloud Native Application Protection Platform provider. By joining Wiz Integrations, Apiiro brings the power of deep ASPM to the partner ecosystem, providing unified and contextual code-to-cloud application security.

Most cloud transformations are stuck in the middle
2023-12-19 04:00

Cloud transformation is increasingly funded by non-IT stakeholders, emphasizing its place as a broader enterprise transformation rather than solely an IT endeavor. Only 32% of cloud initiatives are funded by IT stakeholders, challenging the perception of cloud transformation solely as an IT-centric journey.

Box cloud storage down amid 'critical' outage
2023-12-15 15:36

Cloud storage provider Box is down in a 'critical' outage, preventing customers from accessing their files. The outage started at approximately 9 AM ET, with the company stating that it is a critical outage impacting logins, uploads, downloads, and API calls.

Multi-cloud computing offers benefits but makes IT far more complex
2023-12-15 04:30

"Multi-cloud computing offers huge benefits but makes IT far more complex," said Bernie Hoecker, partner, Enterprise Cloud Transformation leader, ISG. "Enterprises that have made the leap are adopting increasingly powerful tools to manage that complexity." Cloud observability platforms are increasingly essential as multi-cloud complexity increases, the report says.

Learning the safety language of the cloud
2023-12-13 14:19

See multiple layering of clouds in a blue sky can mean you are in line to receive eternal happiness. If only that was true in the complex world of IT, where multi-cloud compute environments are rapidly becoming the norm.

Cloud engineer wreaks havoc on bank network after getting fired
2023-12-12 19:43

An ex-First Republic Bank cloud engineer was sentenced to two years in prison for causing more than $220,000 in damage to his former employer's computer network after allegedly using his company-issued laptop to watch pornography. Miklos Daniel Brody, 38, of San Francisco, pleaded guilty in April to two charges of violating the Computer Fraud and Abuse Act after obtaining information from and intentionally damaging a protected computer, and one charge of making false statements to a government agency.

Cloud engineer gets 2 years for wiping ex-employer’s code repos
2023-12-12 15:02

Miklos Daniel Brody, a cloud engineer, was sentenced to two years in prison and a restitution of $529,000 for wiping the code repositories of his former employer in retaliation for being fired by the company. First Republic Bank was a commercial bank in the U.S., employing over seven thousand people and having an annual revenue of $6.75 billion.

Read the clouds, reduce the cyber risk
2023-12-11 13:52

Webinar In the natural world, there are ten different kinds of cloud - a rare simplicity in meteorological terms. Multi-cloud environments in particular spawn a lot of complexity, and their continuous evolution can also create cyber security blind spots.

Australia building 'top secret' cloud to catch up and link with US, UK intel orgs
2023-12-07 04:33

Australia is building a top-secret cloud to host intelligence data and share it with the US and UK, which have their own clouds built for the same purpose. The three clouds were discussed on Monday by Andrew Shearer, Australia's director-general of national intelligence, at an event hosted by the Center for Strategic & International Studies in Washington, DC. "We are working very hard on a top-secret cloud initiative," Shearer told the event, adding that it will interoperate with similar infrastructure already operated by the US and UK, and mean sensitive data can be shared "Near instantaneously."

Alert: Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts
2023-12-06 13:38

Threat actors can take advantage of Amazon Web Services Security Token Service (AWS STS) as a way to infiltrate cloud accounts and conduct follow-on attacks. The service enables threat actors to...