Security News
The global cloud computing market is expected to reach $1,554. Together with the simplicity of deployment and lower total cost of ownership, these advantages are likely to raise cloud computing demand throughout the forecast period, driving the market growth.
DDoS attacks expand as cybercriminals target cloud providers and ransomware victims. Cybercriminals expanded the types of organizations at the receiving end of DDoS attacks.
Microsoft has announced that the company's new cloud-based Microsoft Defender security solution has entered preview for home customers in the United States. While Microsoft paints a pretty picture of Microsoft Defender Preview's capabilities, in reality, the application is in its very early stages.
Researchers have disclosed three security vulnerabilities affecting Pascom Cloud Phone System that could be combined to achieve a full pre-authenticated remote code execution of affected systems. Kerbit security researcher Daniel Eshetu said the shortcomings, when chained together, can lead to "An unauthenticated attacker gaining root on these devices."
Cloud storage enables an organization to access critical data from anywhere, a welcome benefit during the remote work era. Improving security: Adopting clear cloud storage policies and procedures.
The majority of IT decision-makers plan to increase their organization's use of public cloud and private cloud infrastructure over the next 18-24 months. Despite recognizing the benefits of the cloud, not all workloads are destined for cloud platforms, and some organizations are experiencing a 'cloud boomerang effect' among specific applications.
"We are no longer dealing with just vulnerabilities, but also with vulnerable flows between microservices. On top of that, as cloud-native applications are built on multiple infrastructure layers - the container, the cluster, and the cloud - they way these layers are configured affects what a hacker can do with these vulnerabilities," notes Ron Vider, one of the co-founders and the CTO of Oxeye. "Old-school" software composition analysis and static, dynamic, and interactive application security testing tools are run independently, are not synchronized with one another, and are unable to cross-reference and use enriched data from other code layers in the environment.
Microsoft Defender's tentacles have spread to include the Google Cloud Platform and beefed up visibility with a public preview of CloudKnox Permissions. The addition of GCP was a while coming after Microsoft confirmed the arrival of Defender for Cloud on Amazon Web Services at its Ignite event in November.
Microsoft announced today that Microsoft Defender for Cloud now also comes with native protection for Google Cloud Platform environments, providing security recommendations and threat detection across clouds. Defender for Cloud is a security solution that monitors cloud services for threats, makes recommendations to harden security posture, and detects and warns of vulnerabilities in protected multi-cloud and hybrid environments.
CloudBolt Software released its latest research report, examining industry sentiment in specific dimensions of hybrid cloud/multi-cloud, and aiming to uncover unmet cloud needs that hinder cloud innovation. These limitations are caused by too many groups across an enterprise using too many different tools and clouds, with 80% struggling to achieve comprehensive visibility into cloud usage and spend.