Latest Cloud news

QNAP warns of critical command injection flaws in QTS OS, apps

QNAP Systems published security advisories for two critical command injection vulnerabilities that impact multiple versions of the QTS operating system and applications on its network-attached storage (NAS) devices.
- Bill Toulas
- November 06, 2023
- 07:47 AM
- 0
Qubitstrike attacks rootkit Jupyter Linux servers to steal credentials

Hackers are scanning for internet-exposed Jupyter Notebooks to breach servers and deploy a cocktail of malware consisting of a Linux rootkit, crypto miners, and password-stealing scripts.
- Bill Toulas
- October 18, 2023
- 06:00 AM
- 0
Microsoft: Hackers target Azure cloud VMs via breached SQL servers

Hackers have been observed trying to breach cloud environments through Microsoft SQL Servers vulnerable to SQL injection.
- Bill Toulas
- October 04, 2023
- 10:53 AM
- 0
Hackers exploit MinIO storage system to breach corporate networks

Hackers are exploiting two recent MinIO vulnerabilities to breach object storage systems and access private information, execute arbitrary code, and potentially take over servers.
- Bill Toulas
- September 04, 2023
- 12:45 PM
- 0
Leaseweb is restoring ‘critical’ systems after security breach

Leaseweb, one of the world's largest cloud and hosting providers, notified people that it's working on restoring "critical" systems disabled following a recent security breach.
- Sergiu Gatlan
- August 25, 2023
- 10:59 AM
- 0
Hosting firm says it lost all customer data after ransomware attack

Danish hosting firms CloudNordic and AzeroCloud have suffered ransomware attacks, causing the loss of the majority of customer data and forcing the hosting providers to shut down all systems, including websites, email, and customer sites.
- Bill Toulas
- August 23, 2023
- 10:40 AM
- 8
US cyber safety board to analyze Microsoft Exchange hack of govt emails

The Department of Homeland Security's Cyber Safety Review Board (CSRB) has announced plans to conduct an in-depth review of cloud security practices following recent Chinese hacks of Microsoft Exchange accounts used by US government agencies.
- Bill Toulas
- August 11, 2023
- 01:35 PM
- 0
Hackers increasingly abuse Cloudflare Tunnels for stealthy connections

Hackers are increasingly abusing the legitimate Cloudflare Tunnels feature to create stealthy HTTPS connections from compromised devices, bypass firewalls, and maintain long-term persistence.
- Bill Toulas
- August 07, 2023
- 04:03 PM
- 0
New Microsoft Azure AD CTS feature can be abused for lateral movement

Microsoft's new Azure Active Directory Cross-Tenant Synchronization (CTS) feature, introduced in June 2023, has created a new potential attack surface that might allow threat actors to more easily spread laterally to other Azure tenants.
- Bill Toulas
- August 03, 2023
- 06:55 PM
- 1
Amazon's AWS SSM agent can be used as post-exploitation RAT malware

Researchers have discovered a new post-exploitation technique in Amazon Web Services (AWS) that allows hackers to use the platform's System Manager (SSM) agent as an undetectable Remote Access Trojan (RAT).
- Bill Toulas
- August 02, 2023
- 11:18 AM
- 4
Microsoft expands access to cloud logging data for free after Exchange hacks

Microsoft is expanding access to additional cloud logging data for customers worldwide at no additional cost, allowing easier detection of breached networks and accounts.
- Lawrence Abrams
- July 19, 2023
- 11:39 AM
- 0
CISA shares free tools to help secure data in the cloud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shared a factsheet providing details on free tools and guidance for securing digital assets after switching to the cloud from on-premises environments.
- Sergiu Gatlan
- July 17, 2023
- 01:14 PM
- 1
Cisco SD-WAN vManage impacted by unauthenticated REST API access

The Cisco SD-WAN vManage management software is impacted by a flaw that allows an unauthenticated, remote attacker to gain read or limited write permissions to the configuration of the affected instance.
- Bill Toulas
- July 13, 2023
- 05:53 PM
- 0
New PyLoose Linux malware mines crypto directly from memory

A new fileless malware named PyLoose has been targeting cloud workloads to hijack their computational resources for Monero cryptocurrency mining.
- Bill Toulas
- July 12, 2023
- 05:50 PM
- 0
Get the training you need for an AWS career in this $49 course deal

Right now, you can get the 2023 Complete AWSCloud Engineer, Developer & Architect Course Bundle for $49, hundreds off the total MSRP for the combined courses.
- BleepingComputer Deals
- July 05, 2023
- 07:09 AM
- 0
Western Digital boots outdated NAS devices off of My Cloud

Western Digital is warning owners of My Cloud series devices that can no longer connect to cloud services starting on June 15, 2023, if the devices are not upgraded to the latest firmware, version 5.26.202.
- Bill Toulas
- June 16, 2023
- 12:03 PM
- 0
Master Amazon Web Services with this training bundle deal

AWS is a powerful tool for developers, web engineers, and other IT professionals. This seven-course bundle will show you how to incorporate it into your workflow for $34.99, 58% off the $84 MSRP.
- BleepingComputer Deals
- May 18, 2023
- 07:16 AM
- 0
ScanSource says ransomware attack behind multi-day outages

Technology provider ScanSource has announced it has fallen victim to a ransomware attack impacting some of its systems, business operations, and customer portals.
- Bill Toulas
- May 17, 2023
- 10:41 AM
- 0
Get ready for IT certifications with this CompTIA super course bundle

Getting certified helps you keep your skills up to date and could boost your career. This thirteen-course bundle gets you ready for the exam for $69, 64% off the $195 MSRP, the best price you'll find online.
- BleepingComputer Deals
- May 16, 2023
- 02:05 PM
- 0
Kubernetes RBAC abused to create persistent cluster backdoors

Hackers use a novel method involving RBAC (Role-Based Access Control) to create persistent backdoor accounts on Kubernetes clusters and hijack their resources for Monero crypto-mining.
- Bill Toulas
- April 21, 2023
- 11:35 AM
- 0