Security News

Security researchers have published details about the method used by a strain of macOS malware to steal login information from multiple apps, enabling its operators to steal accounts. Dubbed XCSSET, the malware keeps evolving and has been targeting macOS developers for more than a year by infecting local Xcode projects.

Google Cloud this week announced new security offerings for its customers, including Autonomic Security Operations to improve security operations centers and Cloud Intrusion Detection System for network-based threat detection. Autonomic Security Operations, the Internet giant says, represents a "Stack of products, integrations, blueprints, technical content, and an accelerator program" meant to help customers leverage Chronicle and Google technology and expertise to advance their SOC. A collection of philosophies, practices, and tools, Autonomic Security Operations should help organizations improve their resilience against cyberattacks, with an automated approach to threat management.

Google Cloud this week announced a new set of services aimed at help federal, state, and local government organizations in the United States to implement Zero Trust architecture. A recent Biden administration Executive Order on Improving the Nation's Cybersecurity requires government organizations adhere to a Zero Trust approach to cybersecurity, and Google Cloud has launched three new service offerings tailored to meet those needs and to be in line with National Institute of Standards and Technology standards.

Google has introduced a new Intrusion Detection Service together with "Adaptive Protection" for its cloud firewall, but such services make security a costly feature. CEO Thomas Kurian encouraged businesses to transfer their "Digital assets" to the cloud in order to benefit from "Cloud-native security." According to GM and VP of Cloud Security Sunil Potti, invisible security means "Security technologies are designed in... security operations as a silo disappears."

Google Chrome now comes with up to 50 times faster phishing detection starting with the latest released version 92, promoted to the stable channel on Tuesday. The phishing site detection speed-up stems from improvements to the Chrome image processing tech used to compare the color profiles of visited websites with collections of signals associated with phishing landing pages.

Google announced recently that it has expanded the capabilities of Cloud Armor, a service that provides distributed denial of service protections and a web application firewall to keep customers safe from web attacks. Generally available since 2019, Cloud Armor leverages the same infrastructure and technology that Google uses to protect its own internet-facing properties.

Google Cloud today announced new zero trust offerings for government, a set of services to help U.S. federal, state, and local government organizations implement zero trust architecture in accordance with the Biden Administration's Executive Order on Improving the Nation's Cybersecurity and in alignment with National Institute of Standards and Technology standards. Zero Trust Assessment and Planning offering: Delivered through Google Cloud's professional services organization, the Zero Trust Assessment and Planning offering is designed to help the government reach security goals through zero trust architecture planning for core applications and data.

CoreSite Realty announced support for Google Cloud's Partner Interconnect, a service from Google Cloud that allows customers to connect to Google Cloud globally, along with direct internet peering available natively on its Silicon Valley data center campus. This additional option provides CoreSite with the ability to offer low-latency fiber connectivity to Google Cloud using Dedicated Interconnect to support the Silicon Valley region's most demanding data and application requirements.

Mindtree announced that it has achieved the Data Analytics Services Partner Specialization in the Google Cloud Partner Specialization Program. This specialization highlights Mindtree's expertise and success in leveraging analytics for business insights using Google Cloud Platform technology.

For the seventh time this year, Google is dealing with zero-day attacks targeting users of its flagship Chrome web browser. The search advertising giant released a Chrome security refresh overnight with a warning that malicious hackers are actively exploiting a critical type confusion vulnerability to launch malware attacks.