tldrdailynews.com logo
Tag

Cloud Security

All articles tagged with #cloud security

Cloud breaches pivot to new flaws as credential abuse wanes
technology1 month ago

Cloud breaches pivot to new flaws as credential abuse wanes

Google’s threat intelligence shows cloud intrusions are increasingly driven by exploiting freshly disclosed third-party software flaws, shrinking the window to weaponize exploits to days. Weak credentials have declined as an attack vector while remote code execution flaws like React2Shell (CVE-2025-55182) and XWiki (CVE-2025-24893) are frequently exploited. Attacks often begin via phishing or stolen identities, with Iran-, China-, and North Korea–linked campaigns maintaining long-term access to steal data, crypto, and credentials. OpenID Connect abuse, supply-chain incidents, and insider threats also feature prominently, underscoring the need for automated, rapid incident response as cloud threats accelerate into 2026.

via BleepingComputer|
#apt#cloud-security#data-exfiltration
Identity as the Perimeter: The Hidden Gate in Cyber Breaches
technology1 month ago

Identity as the Perimeter: The Hidden Gate in Cyber Breaches

A sponsored Visual Capitalist infographic (in partnership with Unit 42 by Palo Alto Networks) outlines how cyberattackers breach systems by exploiting identity. Identity-based techniques drive about 65% of initial access, with social engineering and credential misuse leading the way, and 90% of recent investigations showing identity weaknesses as material. Once inside, over-privileged identities and token abuse enable rapid lateral movement, making identity the practical perimeter. Defenses recommended include phishing-resistant MFA (passkeys/FIDO2), rotating machine credentials, shorter sessions, just-in-time elevation for admins, and cross-cloud identity telemetry to detect unusual access chains.

via Visual Capitalist|
#cloud-security#cyberattacks#cybersecurity
Researchers uncover 27 attack scenarios targeting cloud password managers
security1 month ago

Researchers uncover 27 attack scenarios targeting cloud password managers

Swiss researchers disclosed 27 attack scenarios across Bitwarden, LastPass, Dashlane and 1Password that could let attackers view or modify vaults, challenging the science of end-to-end encryption and exploiting issues in onboarding, key escrow, and item-level encryption. A notable attack demonstrated is ‘malicious auto-enrolment’ against Bitwarden, which could allow a server-controlled attacker to hijack a vault during organization onboarding. Vendors are patching (Bitwarden, LastPass, Dashlane) while 1Password defends its SRP-based design. The paper recommends stronger authentication, key separation and ciphertext integrity. Users should check remediation status with providers and ask for audits.)

via Infosecurity Magazine|
#cloud-security#cryptography#end-to-end-encryption
Researchers expose 25 recovery attacks against leading cloud password managers
security1 month ago

Researchers expose 25 recovery attacks against leading cloud password managers

A joint ETH Zurich/USI study identifies 25 distinct password-recovery/related attacks across major cloud password managers (Bitwarden, Dashlane, LastPass; with 1Password also noted for some flaws). Attacks span four categories: exploiting key escrow in account recovery, weaknesses in item-level encryption and metadata, vulnerabilities in sharing features, and downgrades due to legacy code. In total, 12 attacks hit Bitwarden, 7 LastPass, and 6 Dashlane; 1Password was linked to item-level and sharing flaws as known limitations. Vendors have issued patches or mitigations (e.g., Dashlane removing legacy crypto, Bitwarden remediation, LastPass hardening, 1Password using SRP), and there’s no evidence these issues have been exploited in the wild.

via The Hacker News|
#cloud-security#cryptography#password-managers
VoidLink: A Cloud-Native Linux Malware Framework Targets Cloud and Containers
security2 months ago

VoidLink: A Cloud-Native Linux Malware Framework Targets Cloud and Containers

Check Point Research details VoidLink, a modular, cloud-first Linux malware framework designed for long-term access in cloud and container environments. Written in Zig, it features a two-stage loader, an in-memory plugin system with 37 default plugins, a web-based C2 dashboard, and adaptive stealth that tailors behavior after detecting cloud providers (AWS, GCP, Azure, Alibaba, Tencent). It supports multiple command-and-control channels (HTTP/HTTPS, DNS, ICMP) and even a potential mesh network, plus rootkit capabilities (LD_PRELOAD, eBPF, LKM) depending on kernel version, anti-analysis and self-deletion measures, and a broad plugin ecosystem for post-exploitation tasks. The framework appears to be under active development—likely commercial—raising the need for defenders to harden Linux, cloud, and container environments; as of publication, no real-world infections had been observed.

via Check Point Software|
#cloud-security#container-security#linux-malware
Palo Alto Networks and Google Cloud Secure $10 Billion AI and Cloud Deal
technology3 months ago

Palo Alto Networks and Google Cloud Secure $10 Billion AI and Cloud Deal

Palo Alto Networks and Google Cloud have expanded their partnership to enhance AI security across cloud and hybrid environments, integrating Palo Alto's Prisma AIRS with Google Cloud's AI services to protect AI workloads, improve security management, and streamline deployment, while also migrating Palo Alto's internal workloads to Google Cloud to optimize performance and reliability.

via Google Cloud Press Corner|
#ai-infrastructure#ai-security#cloud-security
Researchers Reveal GPT-5 Jailbreak and Zero-Click AI Attacks Threatening Cloud and IoT Security
technology8 months ago

Researchers Reveal GPT-5 Jailbreak and Zero-Click AI Attacks Threatening Cloud and IoT Security

Cybersecurity researchers have discovered sophisticated jailbreak techniques and zero-click AI agent attacks targeting GPT-5 and cloud/IoT systems, exposing vulnerabilities in AI safety measures and highlighting the increasing risks of indirect prompt injections and external system integrations. These attacks can manipulate AI models to generate harmful content or exfiltrate sensitive data without user interaction, emphasizing the need for improved security protocols in AI development.

via The Hacker News|
#ai-security#cloud-security#gpt-5-jailbreak
Upwind Secures $100M Funding, Nears $900M Valuation
business1 year ago

Upwind Secures $100M Funding, Nears $900M Valuation

Israeli cybersecurity startup Upwind is set to raise $100 million in a Series B funding round, valuing the company at $850-900 million. Founded by Amiram Shachar and partners from Spot.io, Upwind focuses on real-time cloud infrastructure protection. The funding round includes investors like Craft Ventures, Greylock, and basketball star Steph Curry's Penny Jar. This round will bring Upwind's total funding to $180 million within two years, as the company plans to expand its workforce and enhance its cloud security platform.

via CTech|
#business#cloud-security#funding
Google's Record-Breaking Wiz Acquisition Signals Major Tech M&A Wave
businesstechnology1 year ago

Google's Record-Breaking Wiz Acquisition Signals Major Tech M&A Wave

Google parent Alphabet Inc. is reportedly nearing a $23-billion acquisition of cloud security startup Wiz Inc., a move seen as a strategic "poker move" that could trigger a significant wave of mergers and acquisitions in Big Tech by 2025. Analysts highlight the deal's potential to reshape the industry, enhance Google's cloud security capabilities, and set new valuation benchmarks for other cybersecurity firms.

via Benzinga|
#alphabet#businesstechnology#cloud-security