Cloud-based alerting systems often struggle to distinguish between normal cloud activity and targeted malicious operations by known threat actors.
The difficulty doesn’t lie in an inability to identify complex alerting operations across thousands of cloud resources or in a failure to follow identity resources, the problem lies in the accurate detection of known persistent threat actor group techniques specifically within cloud environments.
Read more…
Source: Palo Alto Unit 42
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- Cloud, cars and IoT could change grid cybersecurity
November 6, 2018
The proliferation of connected devices including electric cars could provide grid operators with an operational view of cybersecurity threats and change the way the grid is secured, said Karen Evans, assistant secretary of the Energy Department’s Office of Cybersecurity, Energy Security, and Emergency Response. While experts generally consider the internet of things to be a risky ...
- Simplifying identity and access management for more businesses
October 17, 2018
Effective identity management underpins the modern enterprise, and Google has been hard at work to provide simple, secure solutions for administrators and developers. In March, we launched Cloud Identity to help customers manage users, devices and apps from a central console. In July, we announced context-aware access, an innovative approach to access management that implements many elements of Google’s BeyondCorp ...
- Microsoft Set To Win Secret Clearance Ahead Of Pentagon Cloud Bid
October 10, 2018
Microsoft is battling Amazon’s AWS for the multi-billion-pound deal, after Google pulled out due to ethical concerns Microsoft said this week it is set to receive the US government’s top security clearance early next year, as it prepares to bid for a Pentagon cloud contract worth up to $10 billion (£7.7bn). The announcement follows on from the company’s ...
- APT10 Under Close Scrutiny as Potentially Linked to Chinese Ministry of State Security
September 3, 2018
n advanced threat actor has been associated with China’s Ministry of State Security via two individuals and a Chinese firm. Researchers claim that APT10, a likely China-based threat actor, is believed directly connected to the Chinese Ministry of State Security’s (MSS) Tianjin bureau. The allegations come from CrowdStrike which released a report Friday that claims it has found firm ...
- Timehop breach hits 21 million users due to a lack of 2FA on cloud services
July 9, 2018
Timehop, a service that surfaces a user’s past social media content, has revealed a security breach that hit the company on July 4, and resulted in a database of 21 million users hit. As a result, the company has voided all social media authorisation tokens it held, and is alerting its users. Around 4.7 million phone numbers were breached, ...
- Olympic Destroyer Returns to Target Biochemical Labs
June 19, 2018
Olympic Destroyer, the threat actor that caused a crippling sabotage attack on the networks supporting this year’s Winter Games in Pyeongchang, South Korea, has resurfaced with a spy campaign – and with a wider target range. The new campaign began last month and is ongoing, employing spear-phishing documents that share much in common with the weaponized ...