Users trust a cloud provider to configure and maintain their IT services, including data storage. In turn, the provider guarantees that hosted services will stay up and that data will remain strictly confidential.
To demonstrate that their platforms are secure, providers choose different strategies: some run bug bounty programs, some rely on regular internal audits, and some bring in external research teams. However, cloud pentest methodology still has plenty of blind spots: there’s no single standard, and the outcome depends on the experience and skill of the team.
Read more…
Source: Kaspersky
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- Community Alert: Ongoing Malicious Campaign Impacting Azure Cloud Environments
February 12, 2024
Over the past weeks, Proofpoint researchers have been monitoring an ongoing cloud account takeover campaign impacting dozens of Microsoft Azure environments and compromising hundreds of user accounts, including senior executives. This post serves as a community warning regarding the attack and offers suggestions that affected organizations can implement to protect themselves from it. Proofpoint researchers detected ...
- Cyber Security & Cloud Congress 2024: Uniting 7,000 Experts at the Global Hub of Innovation and Insight
January 22, 2024
Santa Clara, CA — 17.01.2024 Cyber Security & Cloud Congress 2024, is an esteemed assembly of more than 7,000 professionals in the Cyber Security & Cloud field. The event is scheduled to occur on June 5-6, 2024, at the Santa Clara Convention Center. Envisioned as one of the most extensive conferences and exhibitions of its category ...
- 7777-Botnet Infection Vectors
January 18, 2024
In October 2023, the 7777-Botnet was first discussed in a writeup titled, The Curious Case of the 7777-Botnet. The author, supported by other researchers, describes a ~10,000 node botnet that’s purpose is to brute-force Microsoft Azure user credentials. It employs targeted, low-volume methods that are so effective that they were only discovered due to a geolocation ...
- ownCloud vulnerability can be used to extract admin passwords
November 28, 2023
ownCloud has warned users about three critical security flaws in its file-sharing software which, if exploited, could reveal sensitive information and modify files. An especially and potentially impactful one is a vulnerability that could lead to disclosure of sensitive credentials and configuration in containerized deployments. ownCloud is a very widely used open-source project that allows users ...
- Cyber Security & Cloud Expo Global returns to London – What to expect
October 25, 2023
Cyber Security & Cloud Expo Global, one of the most highly anticipated events in the tech and cyber community, is back, and it promises to be bigger and more transformative than ever. Scheduled to take place from November 30th to December 1st, 2023, at the renowned Olympia London, this event is set to bring together over ...
- How BPF-Enabled Malware Works
October 19, 2023
Berkeley Packet Filtering (BPF) is a kind of technology that allows programs to effectively execute code in the kernels of modern operating systems, such as Linux and Berkeley Software Distribution (BSD) variants. Soon, Windows will also add support for BPF. While many defenders might be unaware of its existence, cybercriminals have already started using BPF ...