cloud security
Even with ‘traditional’ configuration of resources in the cloud - and Kubernetes becomes a more extreme example of this – what is crystal clear is that security cannot stay outside of the development and DevOps teams."
"The risk is mainly with multi-tenant applications where this misconfiguration could result [in] account and privilege escalation" -- here's what you need to do.
With harvested credentials some groups spun up additional resources until they exhausted the credit cards on file...
A recent attack tracked by researchers at cloud security company Sysdig saw the attackers use an exposed Kubernetes container to move laterally to the victim’s AWS account – gaining initial access by exploiting a public-facing service in a self-managed Kubernetes cluster hosted inside an AWS cloud account. The company'
Days before the exposure this week of over three terabytes of military emails owing to misconfigured Azure services, the US Department of Defense (DoD)’s Inspector General had warned Pentagon CIOs that their teams were not properly reviewing documentation designed to ensure military cloud security – and running systems with unmitigated
Oracle fixed the vulnerability "extraordinarily quickly" in July, but it is unclear when it was introduced
Strong new requirements for cloud providers and network security on their way.
The German bank is working to incorporate acquisition Contis' tech.
Rapidly fixed and not exploited, but hair-raising nonetheless.