News in the Cloud category

Amazon's AWS SSM agent can be used as post-exploitation RAT malware

Researchers have discovered a new post-exploitation technique in Amazon Web Services (AWS) that allows hackers to use the platform's System Manager (SSM) agent as an undetectable Remote Access Trojan (RAT).
- Bill Toulas
- August 02, 2023
- 11:18 AM
- 4
Cisco SD-WAN vManage impacted by unauthenticated REST API access

The Cisco SD-WAN vManage management software is impacted by a flaw that allows an unauthenticated, remote attacker to gain read or limited write permissions to the configuration of the affected instance.
- Bill Toulas
- July 13, 2023
- 05:53 PM
- 0
New PyLoose Linux malware mines crypto directly from memory

A new fileless malware named PyLoose has been targeting cloud workloads to hijack their computational resources for Monero cryptocurrency mining.
- Bill Toulas
- July 12, 2023
- 05:50 PM
- 0
Western Digital boots outdated NAS devices off of My Cloud

Western Digital is warning owners of My Cloud series devices that can no longer connect to cloud services starting on June 15, 2023, if the devices are not upgraded to the latest firmware, version 5.26.202.
- Bill Toulas
- June 16, 2023
- 12:03 PM
- 0
Sponsored Content
EC-Council’s Certified CISO Hall of Fame Report 2023 shows Cloud Security as Top Concern

A survey of global cybersecurity leaders through the 2023 Certified CISO Hall of Fame Report commissioned by EC-Council identified 4 primary areas of grave concern: cloud security, data security, security governance, and lack of cybersecurity talent.
- Sponsored by EC-Council
- June 07, 2023
- 10:02 AM
- 0
Kubernetes RBAC abused to create persistent cluster backdoors

Hackers use a novel method involving RBAC (Role-Based Access Control) to create persistent backdoor accounts on Kubernetes clusters and hijack their resources for Monero crypto-mining.
- Bill Toulas
- April 21, 2023
- 11:35 AM
- 0
New AlienFox toolkit steals credentials for 18 cloud services

A new modular toolkit called 'AlienFox' allows threat actors to scan for misconfigured servers to steal authentication secrets and credentials for cloud-based email services.
- Bill Toulas
- March 30, 2023
- 06:00 AM
- 0
SCARLETEEL hackers use advanced cloud skills to steal source code, data

An advanced hacking operation dubbed 'SCARLETEEL' targets public-facing web apps running in containers to infiltrate cloud services and steal sensitive data.
- Bill Toulas
- February 28, 2023
- 11:00 AM
- 0
GoTo says hackers stole customers' backups and encryption key

GoTo (formerly LogMeIn) is warning that threat actors stole encrypted backups containing customer information and an encryption key for a portion of that data.
- Bill Toulas
- January 24, 2023
- 08:43 AM
- 3
Australian insurance firm Medibank confirms ransomware attack

Health insurance provider Medibank has confirmed that a ransomware attack is responsible for last week's cyberattack and disruption of online services.
- Bill Toulas
- October 17, 2022
- 01:56 PM
- 1
Redis, MongoDB, and Elastic: 2022’s top exposed databases

Security researchers have noticed an increase in the number of databases publicly exposed to the Internet, with 308,000 identified in 2021. The growth continued quarter over quarter, peaking in the first months of this year.
- Bill Toulas
- April 27, 2022
- 04:29 AM
- 0
Docker servers hacked in ongoing cryptomining malware campaign

Docker APIs on Linux servers are being targeted by a large-scale Monero crypto-mining campaign from the operators of the Lemon_Duck botnet.
- Bill Toulas
- April 21, 2022
- 03:54 PM
- 0
Hetzner lost customer data and gave 20€ as compensation

Hetzner Online GmbH, a German cloud services provider, told some customers this week that their data had been irreversibly lost and were provided a 20€ compensation in online credit.
- Bill Toulas
- April 14, 2022
- 10:12 AM
- 1
Microsoft shares guidance on securing Windows 365 Cloud PCs

Microsoft has shared guidance on securing Windows 365 Cloud PCs and more info on their built-in security capabilities.
- Sergiu Gatlan
- August 22, 2021
- 10:00 AM
- 0
Microsoft's Azure SDK site tricked into listing fake package

A security researcher was able to add a counterfeit test package to the official list of Microsoft Azure SDK latest releases. The simple trick if abused by an attacker can give off the impression that their malicious package is part of the Azure SDK suite.
- Ax Sharma
- March 17, 2021
- 04:01 AM
- 0
OVH data center fire likely caused by faulty UPS power supply

OVH founder and chairman Octave Klaba has provided a plausible explanation for the fire that burned down OVH data centers in Strasbourg, France.
- Ax Sharma
- March 12, 2021
- 02:45 AM
- 0
Exposed Azure bucket leaked passports, IDs of volleyball reporters

A publicly exposed cloud storage bucket was found to contain images of hundreds of passports and identity documents belonging to journalists and volleyball players from around the world.
- Ax Sharma
- February 01, 2021
- 10:45 AM
- 0
Chinese-linked Muhstik botnet targets Oracle WebLogic, Drupal

Muhstik botnet has been targeting cloud infrastructure for years. New details have emerged related to this malware that shed light on its nefarious activities and origins.
- Ax Sharma
- November 11, 2020
- 10:02 AM
- 0
Crypto-mining malware adds Linux password stealing capability

The TeamTNT cybercrime group has recently updated its crypto-mining worm with password-stealing capabilities and with an additional network scanner to make it easier to spread to other vulnerable devices.
- Sergiu Gatlan
- October 05, 2020
- 12:13 PM
- 2
Ransomware gangs add DDoS attacks to their extortion arsenal

A ransomware operation has started to utilize a new tactic to extort their victims: DDoS a victim's website until they return to the negotiation table.
- Lawrence Abrams
- October 01, 2020
- 05:20 PM
- 2