Security News
![Google Fixes GCP Composer Flaw That Could've Led to Remote Code Execution](/static/build/img/news/google-fixes-gcp-composer-flaw-that-could-ve-led-to-remote-code-execution-small.jpg)
A now-patched critical security flaw impacting Google Cloud Platform (GCP) Composer could have been exploited to achieve remote code execution on cloud servers by means of a supply chain attack...
![GhostToken GCP flaw let attackers backdoor Google accounts](/static/build/img/news/ghosttoken-gcp-flaw-let-attackers-backdoor-google-accounts-small.jpg)
Google has addressed a Cloud Platform security vulnerability impacting all users and allowing attackers to backdoor their accounts using malicious OAuth applications installed from the Google Marketplace or third-party providers.Named GhostToken by Astrix Security, the Israeli cybersecurity startup that found and reported it to Google in June 2022, this security flaw was addressed via a global patch that rolled out in early April 2023.
![Week in review: LastPass breach, GCP data exfiltration, UEFI bootkit](/static/build/img/news/week-in-review-lastpass-breach-gcp-data-exfiltration-uefi-bootkit-small.jpg)
5 open source Burp Suite penetration testing extensions you should check outWhen it comes to assessing the security of computer systems, penetration testing tools are critical for identifying vulnerabilities that attackers may exploit. LastPass breach: Hacker accessed corporate vault by compromising senior developer's home PCLastPass is, once again, telling customers about a security incident related to the August 2022 breach of its development environment and subsequent unauthorized access to the company's third-party cloud storage service that hosted backups.
![Microsoft adds GCP to Defender for Cloud](/static/build/img/news/microsoft-adds-gcp-to-defender-for-cloud-small.jpg)
Microsoft Defender's tentacles have spread to include the Google Cloud Platform and beefed up visibility with a public preview of CloudKnox Permissions. The addition of GCP was a while coming after Microsoft confirmed the arrival of Defender for Cloud on Amazon Web Services at its Ignite event in November.
![Google Working on Patching GCP Vulnerability That Allows VM Takeover](/static/build/img/news/alt/application-stats-small.jpg)
A security researcher has disclosed the details of a vulnerability that can be exploited to take over virtual machines on Google Cloud Platform. Rad decided to disclose the vulnerability due to Google's failure to fix the issue and provide information on its progress.
![Study on public cloud performance: AWS, GCP, Azure, Alibaba and IBM Cloud](/static/build/img/news/alt/cloud-cybersecurity-statistics-small.jpg)
There are notable network performance and connectivity differences between the five major public cloud providers – Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, Alibaba...
![Cavirin Free for CIS benchark now available on AWS and GCP](/static/build/img/news/alt/data-breach-stats-small.jpg)
Cavirin is excited to announce the introduction of the market’s first CIS benchmark for cloud security as a free service. The Cavirin free service offers genuine value when compared to the cost of...
![McAfee and GCP integration offers improved security insight for Cloud SCC users](/static/build/img/news/alt/antivirus-stats-small.jpg)
McAfee, the device-to-cloud cybersecurity company, announced its support for Google Cloud Platform (GCP) Cloud Security Command Center (Cloud SCC). McAfee MVISION Cloud now integrates with GCP...
![Trend Micro extends protection to cover GCP, containers, Gmail](/static/build/img/news/alt/Data-Cybersecurity-Predictions-2-small.jpg)
Trend Micro, a global leader in cybersecurity solutions, announced enhancements to its Deep Security and Cloud App Security products designed to extend protection to virtual machines on the Google...