cloud security
P2Pinfect now able to deploy ransomware and crypto miner payloads.
Datadog suggests AWS Amplify users conduct "an audit of your roles and potential threat activity" after investigation.
Google says "we've taken several steps to reduce the risk of users making authorization errors with the Kubernetes built-in users and groups, including..."
Google unveiled a series of AI-centric features for its various cloud offerings, with security in particular being a focus
Even with ‘traditional’ configuration of resources in the cloud - and Kubernetes becomes a more extreme example of this – what is crystal clear is that security cannot stay outside of the development and DevOps teams."
"The risk is mainly with multi-tenant applications where this misconfiguration could result [in] account and privilege escalation" -- here's what you need to do.
With harvested credentials some groups spun up additional resources until they exhausted the credit cards on file...
A recent attack tracked by researchers at cloud security company Sysdig saw the attackers use an exposed Kubernetes container to move laterally to the victim’s AWS account – gaining initial access by exploiting a public-facing service in a self-managed Kubernetes cluster hosted inside an AWS cloud account. The company'