cloud security
"RFPs now look much more thought-out: Cloud security is very much established in most CISOs’ minds as a category.”
P2Pinfect now able to deploy ransomware and crypto miner payloads.
Datadog suggests AWS Amplify users conduct "an audit of your roles and potential threat activity" after investigation.
Google says "we've taken several steps to reduce the risk of users making authorization errors with the Kubernetes built-in users and groups, including..."
Google unveiled a series of AI-centric features for its various cloud offerings, with security in particular being a focus
Even with ‘traditional’ configuration of resources in the cloud - and Kubernetes becomes a more extreme example of this – what is crystal clear is that security cannot stay outside of the development and DevOps teams."
"The risk is mainly with multi-tenant applications where this misconfiguration could result [in] account and privilege escalation" -- here's what you need to do.
With harvested credentials some groups spun up additional resources until they exhausted the credit cards on file...