Securing cloud workloads with Wazuh – an open source, SIEM and XDR platform
Wazuh is a free, open source security platform that offers Unified XDR and SIEM capabilities. Learn how Wazuh detect and…
What Happened in That Cyberattack? With Some Cloud Services, You May Never Know
More cyberattackers are targeting organizations' cloud environments, but some cloud services, such as Google Cloud Platform's storage, fail to create…
LastPass DevOps Engineer Targeted for Cloud Decryption Keys in Latest Breach Revelation
The adversaries obtained a decryption key to a LastPass database containing multifactor authentication and federation information as well as customer…
SCARLETEEL hackers use advanced cloud skills to steal source code, data
An advanced hacking operation dubbed 'SCARLETEEL' targets public-facing web apps running in containers to infiltrate cloud services and steal sensitive…
LastPass: DevOps engineer hacked to steal password vault data in 2022 breach
LastPass revealed more information on a "coordinated second attack," where a threat actor accessed and stole data from the Amazon…
TELUS investigating leak of stolen source code, employee data
Canada's second-largest telecom, TELUS is investigating a potential data breach after a threat actor shared samples online of what appears to…
Check Point Boosts AppSec Focus With CNAPP Enhancements
Established network security players like Check Point are responding to the shift to cloud-native applications, which have exposed more vulnerabilities…
Malicious Google ads sneak AWS phishing sites into search results
A new phishing campaign targeting Amazon Web Services (AWS) logins is abusing Google ads to sneak phishing sites into Google…
Actively exploited GoAnywhere MFT zero-day gets emergency patch
Fortra has released an emergency patch to address an actively exploited zero-day vulnerability in the GoAnywhere MFT secure file transfer tool. [...]
Exploit released for actively exploited GoAnywhere MFT zero-day
Exploit code has been released for an actively exploited zero-day vulnerability affecting Internet-exposed GoAnywhere MFT administrator consoles. [...]