Denonia malware targets AWS Lambda
A first of its kind malware dubbed Denonia has been targeting Amazon Web Services (AWS) Lambda, an event-driven, serverless computing platform.
AWS
Guidelines for securing Content Management Systems
The Australian Cyber Security Centre (ACSC) has released new guidelines to assist organizations in securing Content Management Systems (CMS). The guidelines include good mitigation advice in areas of patching, account management, hardening and monitoring to name a few.
Microsoft introduces Application Inspector
Microsoft has introduced a new source code analyzer tool dubbed Microsoft Application Inspector. The tool is designed to “identify interesting features in source code” and can help enable developers understand software components your apps use.
Top 3 AWS security configuration mistakes
Cloud security experts from Palo Alto Networks have warned about three critical misconfigurations that are most common in most organizations and have contributed to the majority of cloud attacks.
Serious open-source container vulnerability
A serious vulnerability in runc open-source container management has been discovered and patched. runc is used by most of the underlying container engines and runtime, such as Docker, cri-o, containerd, and Kubernetes.
FreeRTOS vulnerabilities patched
Multiple serious vulnerabilities have been discovered within FreeRTOS, a real-time operating system kernel used in large number of internet-connected devices.
AWS S3 error exposes data on 31K GoDaddy servers
Cybersecurity firm UpGuard has discovered an error in Amazon AWS bucket configuration that led to the exposure of internal GoDaddy infrastructure data.
Massive Breach at Uber covered up
Uber suffered a massive data breach in October 2016 and paid hackers $100,000 to keep quiet about it and delete the data. The breach resulted in the loss of sensitive personal information on nearly 50 million Uber users and 7 million Uber drivers. According to the current CEO Dara Khosrowshahi, the personal data included drivers licenses …
S3 Buckets exposed
Three misconfigured AWS S3 buckets exposed US military archives of an astounding size.
6 Important Safeguards To Stop Insider Threats
Insider threats can be malicious or inadvertant, but the consequences can lead to costly brand damage or significant financial losses to your company. Understanding the types of insider threats and corresponding risk indicators can help minimize impact and damage caused by such threats.