Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

April 2024

Detect vulnerabilities in minutes with Agentless Scanning for Cloud Security Management

Security teams require complete visibility into their hosts, containers, and functions in order to detect, prioritize, and remediate their most pressing security risks. The Datadog Agent helps you achieve this visibility by collecting deep insights in your environment through logs, distributed traces, infrastructure metrics, and other key telemetry.

Accelerating AI Adoption: AI Workload Security for CNAPP

When it comes to securing applications in the cloud, adaptation is not just a strategy but a necessity. We’re currently experiencing a monumental shift driven by the mass adoption of AI, fundamentally changing the way companies operate. From optimizing efficiency through automation to transforming the customer experience with speed and personalization, AI has empowered developers with exciting new capabilities.

Identity Theft: What It Is, How To Prevent It, and Why It's Terrible

Identity theft is one of the things you never expect to happen to you until it does. The scariest part is not the theft itself but what follows after. Victims of identity theft don't often discover their financial, reputational, and bureaucratic lives are destroyed until long after the crime was committed. This delay makes it extremely difficult for authorities to investigate identity theft cases.

All-in-1 Solution for Kubernetes Cluster Backup, Migration, and DR on Azure & Azure Arc

CloudCasa enhances Kubernetes data protection, simplifying backups, recovery, and migrations across cloud platforms like GCP, AWS, and Azure. Learn about our one-touch solution for cluster backup, migration, replication, and disaster recovery, ensuring your applications are resilient and compliant. Dive into our visual guide on operational continuity with edge devices and more.

Breaking the Cloud to Build the Cloud

There’s no such thing as a perfectly secure cloud environment. Vulnerabilities, holes left open by misconfigurations, over-permissive roles, and more create a target-rich environment for attackers. Breaking the cloud for good is the job of these expert hackers. View this panel session to learn about offensive security techniques and tactics for breaking the cloud to build the cloud better.

Cloud Detection and Response Has Evolving, Cloud-Scale Challenges

In our previous post, we explored the essentials of cloud detection and response (CDR), highlighting how the cloud's scale and complexity have transformed cybersecurity needs. We discussed the types of threats unique to the cloud and the broad benefits that CDR systems offer to organizations aiming to secure their cloud environments. This follow-up takes us deeper into some of the challenges that arise with detecting and responding to threats in the cloud.

Nightfall AI: AI-Powered Data Leak Prevention (DLP) for the Enterprise

Data leak prevention (DLP) has become a critical tool for securing the modern enterprise. Think of popular workplace apps like Slack, Salesforce, Google Drive, M365, ChatGPT, and more; these apps have revolutionized workplace productivity, but they’ve also provided new pathways to spread sensitive data and risk compliance. This is where DLP solutions come in. However, legacy DLP relies on rules and heuristics, which overload security teams with false positive alerts and slow the remediation process to a grinding halt.

The What and Why of Cloud Detection and Response

A recent survey from Gartner forecasts that worldwide end-user spending on public cloud services will total $679 billion in 2024, and that number is expected to jump to $1 trillion in 2027. Businesses left and right are moving to the cloud. But as they make their move, the old ways of protecting data—like building a virtual wall around your data (“perimeter security”)—are proving inadequate.

Cloud-scale Threats Need Cloud Detection and Response

A recent survey from Gartner forecasts that worldwide end-user spending on public cloud services will total $679 billion in 2024, and that number is expected to jump to $1 trillion in 2027. Businesses left and right are moving to the cloud. But as they make their move, the old ways of protecting data—like building a virtual wall around your data (“perimeter security”)—are proving inadequate.

Cloud Application Security - Top Threats and Best Practices

Cloud workloads continue to grow as new digital innovations arise monthly in the worlds of IoT applications, cloud services, and big data analytics. However, the cloud's dynamic and often complex nature can make cloud application security challenging. This gap in cloud security readiness is a growing concern for organizations worldwide, with CISOs feeling the pressure. 61% of CISOs feel unequipped to cope with a targeted attack, and 68% expect such an attack within the following year.

How to Use Netskope Security with the Apple Vision Pro

Can the VR headsets make the leap from a cool gadget to a serious productivity tool for businesses? The potential is huge for new uses cases, especially for collaboration, training, design, and engineering. We got our hands on the Apple Vision Pro headset and installed the Netskope Client to explore how our customers can unlock its productivity benefits without sacrificing security.

What is SaaS Security Posture Management?

In a cloud-first world like today, Software-as-a-Service (SaaS) is becoming the everyday solution for organizations to operate and boost their efficiency. Still, this rapid uptake of SaaS apps brings new security problems. This is precisely where SSPM comes in-a vital tool to help organizations efficiently track, audit, and enhance their SaaS application security posture. What is SaaS Security Posture Management? How does it work? In this piece, we'll break down the fundamentals of SSPM, including its benefits, features, and how it sets itself apart from other similar solutions.

Detectify is now available on AWS Marketplace

We’re pleased to share that our External Attack Surface Management (EASM) solution is now available on AWS Marketplace through private offer. Our inclusion means that our customers can now more conveniently and easily purchase both Surface Monitoring and Application Scanning for comprehensive attack surface coverage.

5 Best Practices to Secure AWS Resources

Organizations are increasingly turning to cloud computing for IT agility, resilience and scalability. Amazon Web Services (AWS) stands at the forefront of this digital transformation, offering a robust, flexible and cost-effective platform that helps businesses drive growth and innovation. However, as organizations migrate to the cloud, they face a complex and growing threat landscape of sophisticated and cloud-conscious threat actors.

Cloud Security Regulations in Financial Services

As the financial sector continues to adopt cloud technology, regulatory frameworks such as the updated NIS2 Directive and the Digital Operational Resilience Act (DORA) are shaping the cybersecurity landscape. Every second counts in such a complex environment: attackers can move quickly in the cloud, so defenders must change their strategies and tools to keep up. The financial sector has always been a prime target for cyber attacks, with the average breach costing almost 6 million US dollars.

NSA Debuts Top 10 Cloud Security Mitigation Strategies

As businesses transition to hybrid and multi-cloud setups, vulnerabilities arising from misconfigurations and security gaps are escalating, attracting attention from bad actors. In response, the US National Security Agency (NSA) issued a set of ten recommended mitigation strategies, published earlier this year (with support from the US Cybersecurity and Infrastructure Security Agency on six of the strategies).

What Is Cloud Security?

Cloud computing has gained traction in recent years due to its ease of scalability, flexibility, and efficiency. It allows businesses to accelerate innovation and spend less in meeting client or consumer demands. With several businesses migrating their operations to the cloud, cloud computing has become the technology of choice as it becomes more readily accessible and affordable.

The IT Hour | JumpCloud Go-es Beyond Chrome 04.19.24

Scott Reed, Product Manager at JumpCloud joins us to talk about the latest updates on JumpCloud Go. Join us at 11:30 am ET. The #IT Hour hosted by #JumpCloud is a #communityprogram focused on the life of #ITAdministrators. With the ever changing #ITlandscape, having community and professional networking opportunities is very valuable. You can expect from our weekly conversations.

DDoS report Q1 2024, certificate changes, QR phishing, and more

In this week's episode, we discuss different topics from blogs that we published in the previous couple of weeks, right after our Developer Week 2024. Host João Tomé is joined by our Field CTO, Trey Guinn, based in San Francisco. We discuss our most recent DDoS threat report for Q1 2024, highlighting the continued increase in DDoS attacks and emerging trends. Additionally, we address Cloudflare's efforts to ensure our customers aren't affected by Let's Encrypt's certificate chain change, emphasizing the importance of certificates.

How to Defend Against Modern Phishing Attacks

Phishing isn’t what it used to be. Older, popular scams — like grammatically incorrect love letters and mysterious princes who just need a little money — have given way to sophisticated and dangerous social engineering attacks. In fact, phishing has become so prevalent and effective that it is one of the three primary ways hackers compromise credentials.

Azure Key Vault vs HashiCorp Vault: Comparison

With so many organizations moving to cloud-based infrastructures, the need for security management has become more essential than ever. Azure Key Vault and HashiCorp Vault are two leading cloud solutions for safeguarding sensitive information. While both of them are used for managing secrets, their approaches, features, and integrations can differ significantly, which we are going to discuss in this blog.

Azure Key Vault vs CyberArk: Comparison to Know

What comes to your mind when you think of a secret? To protect it in whichever manner you could, right? In the real-world scenario, it’s our nature and our self-control how we can manage our secrets and protect them but matter gets different when it comes to the virtual world. In the virtual world, a secret is anything that you aim to rigidly control access to, such as passwords, tokens, API & encryption keys, or certificates.

Cloudflare named in 2024 Gartner Magic Quadrant for Security Service Edge

Gartner has once again named Cloudflare to the Gartner® Magic Quadrant™ for Security Service Edge (SSE) report1. We are excited to share that Cloudflare is one of only ten vendors recognized in this report. For the second year in a row, we are recognized for our ability to execute and the completeness of our vision. You can read more about our position in the report here.

Unleashing Innovation: The Dynamics of SaaS Development Agencies

In today's rapidly evolving business landscape, agility and scalability are paramount. Traditional software models often struggle to meet the dynamic demands of modern enterprises. Enter Software as a Service (SaaS), a game-changing paradigm that offers flexible, subscription-based solutions accessible via the cloud. SaaS applications empower businesses to streamline operations, enhance productivity, and adapt to market shifts with ease.

How Cloudflare Cloud Email Security protects against the evolving threat of QR phishing

In the ever-evolving landscape of cyber threats, a subtle yet potent form of phishing has emerged — quishing, short for QR phishing. It has been 30 years since the invention of QR codes, yet quishing still poses a significant risk, especially after the era of COVID, when QR codes became the norm to check statuses, register for events, and even order food.

What it takes to do Cloud Detection & Response

A guest post by James Berthoty the founder of Latio Tech. The shift to cloud has meant an explosion in cloud security-related acronyms – so many that it can be difficult to know what you currently have versus what’s missing or available. First we bought CSPMs (Cloud Security Posture Management), then CWPPs (Cloud Workload Protection Platforms), then CNAPPs (Cloud Native Application Protection Platform), then CDRs (Cloud Detection Response), and now KDRs (Kubernetes Detection Response).

Five Reasons to Prioritize Application Modernization on AWS

Today, every organization has significant investments in their overall tech stack, both financially and operationally, and as technology evolves, it is crucial that we keep pace to ensure success. For many organizations, legacy applications house some of their most mission critical applications, and replacing or retiring them would be incredibly costly, monetarily and in terms of productivity. With application modernization, businesses can now skip the hassle of completely rebuilding applications.

Active Cloud Risk: Why Static Checks Are Not Enough

How would you feel about your home security system if it only checked to see if your doors and windows were locked periodically? This security system would provide great visualizations of your house and how a criminal could get from one room to another, ultimately reaching one of your prized possessions, like a safe. However, it doesn’t have cameras on your doorbell or windows to alert you in real time when someone suspicious was approaching, or worse, trying to break into your house.

Making BYOD Work, Safely

Achieving an effective bring-your-own-device (BYOD) program has been aspirational for many IT organizations. There are explicit security and privacy concerns, which have led many admins to sour on the concept, despite its benefits. Admins have even reluctantly accepted the risk of personal PCs being left unmanaged, which leaves gaps in management and visibility.

Cloud Disaster Recovery: A Complete Overview

The cloud provides multiple benefits for running services and storing data. Just like with data stored on-premises, data stored offsite and in the cloud should be backed up. Data stored in the cloud is not invulnerable by default, as the risk of data loss is still present due to accidental deletions and cloud-specific threats. At the same time, the cloud can be useful for disaster recovery.

Password Length vs Complexity: Which Is More Important?

In this video, learn about the differences between password length and complexity, which is more important, and four tips to improve password security in your organization. Learn more about: Resources and social media: Transcript: It’s no secret that passwords aren’t foolproof. In fact, the most common way that hackers infiltrate an organization is through stolen credentials. But until the day that everything has shifted to passwordless authentication, passwords are still necessary. So, how can we make them as strong and effective as possible?

New and Improved Packages from JumpCloud

IT professionals are the people who Make Work Happen™ throughout their organization — so it’s important they have the right tools at their fingertips. We believe that the best tools are those that can adapt to meet their needs as they evolve. This ethos drives the continual investment in the JumpCloud platform based on regular user input and feedback. As we’ve collected and acted upon customer feedback over the last couple of years, the JumpCloud platform has grown significantly.

The IT Hour | Microsoft Store Integration! 04.12.24

Josh Roland, Product Manager, joins us to talk about the latest improvement in Software Management for Windows. Join us at 11:30 am ET. The #IT Hour hosted by #JumpCloud is a #communityprogram focused on the life of #ITAdministrators. With the ever changing #ITlandscape, having community and professional networking opportunities is very valuable. You can expect from our weekly conversations.

IT for Startups and Scale-Ups

JumpCloud’s MSP partners are at the forefront of providing essential IT services to small and medium-sized businesses globally. In our interview series, we delve into conversations with these partners, exploring the dynamics of their MSPs and how JumpCloud plays a pivotal role in their operations. In today’s feature, we had the opportunity to speak with Chris Notley of FIFUM.

CrowdStrike Extends Identity Security Capabilities to Stop Attacks in the Cloud

Two recent Microsoft breaches underscore the growing problem of cloud identity attacks and why it’s critical to stop them. While Microsoft Active Directory (AD) remains a prime target for attackers, cloud identity stores such as Microsoft Entra ID are also a target of opportunity. The reason is simple: Threat actors increasingly seek to mimic legitimate users in the target system. They can just as easily abuse identities from cloud identity providers as they can in on-premises AD environments.

What does IAM PassRole do and How to Set it Up

95% of cloud security fails are due to internal slip-ups. One wrong password, one sloppy permission, and your sensitive data are out in the open. Thankfully, AWS gives you tools to fight back. IAM lets you control who does what, down to the finest detail. And IAM PassRole? It prevents sneaky permission grabs that put your data at risk.

CrowdStrike and Google Cloud Expand Strategic Partnership to Deliver Unified Cloud Security

CrowdStrike and Google Cloud today debuted an expanded strategic partnership with a series of announcements that demonstrate our ability to stop cloud breaches with industry-leading AI-powered protection. These new features and integrations are built to protect Google Cloud and multi-cloud customers against adversaries that are increasingly targeting cloud environments.

Security at the Speed of Cloud

Cloud native technologies have empowered engineering teams to innovate rapidly: from releasing a few times a year to several times a day. This means security assessment have to be done continuously. To achieve this, developer, operation, and security teams have to collaborate in novel ways. Instead of communicating through backlogs, they need to work towards shared objectives. From processes to tooling, teams have to rethink the way they approach security, share context, and improve the security posture of their organization.

Report on changes to your security posture with Cloud Security Management

Achieving and maintaining compliance in the cloud proves challenging for many organizations, as it is a complex, ongoing effort that includes safeguarding sensitive data and ensuring infrastructure resources are correctly configured. Success often hinges on the ability to monitor compliance-related trends over time, enabling organizations to spot risk patterns, gauge their current compliance posture, and adapt as new risks emerge. However, gathering this data can be difficult.

How to Convince Your Manager to Move Away from Active Directory

Microsoft’s Active Directory (AD) has been a mainstay of information systems for over 20 years, but it was intended for a different era of computing and business requirements. Its persistence affects IT’s agility, impacts security posture, and limits IT’s capacity to provide the best-of-breed tools that employees expect.

CNAPP, CSPM, CIEM, CWPP - Oh My!

We all know the cybersecurity industry loves its acronyms, but just because this fact is widely known doesn’t mean everyone knows the story behind the alphabet soup groups of letters, we must deal with on a regular basis. Let’s take a moment to discuss some of the more prominent security architectures specific to the cloud so we are all on the same page: CNAPP, CWPP, CIEM, and CSPM.

Security Considerations When Using the Public Cloud

As we reach the end of our five-part series on “Secure Cloud Adoption in the Enterprise”, we thought it would be useful to summarize the discussion and also leave with you a few important things to consider when you make the decision to use the public cloud. Clichéd as it may sound, Security and Privacy are probably two of your most important security concerns in cloud computing as an IT executive.
Featured Post

Cloud computing - The first step to an effective data modernisation strategy

Many organisations realise the benefits that lie within the data they collect daily. This modern approach to data empowers businesses to leverage data for innovation and monetization while at the same time enhancing security and privacy. While this may seem like a conundrum as companies have traditionally buried their data deep into IT architecture to prevent it from being accessible, even by the employees, today it is possible to have the best of both. This process starts with the cloud.

11:11 Systems wins 2024 Cloud Computing Product of the Year Award

Technically awards season has ended, at least when it comes to Hollywood. There. were some big wins for Oppenheimer, and who wasn’t feeling the Kenergy? 2024 is also shaping up as a big year for 11:11, as we’ve already brought home several awards. And now we have been awarded the 2024 Cloud Computing Product of the Year Award for 11:11 Cloud , presented by presented by Cloud Computing Magazine.

Secure your Windows workloads with Datadog Cloud Security Management

As Windows organizations migrate toward cloud-based environments, they often lose context of their full stack. In addition to securing their on-premises servers, they now need to deal with virtual servers, managed services, and platform-as-a-service offerings. Cloud-based resources require organizations to relinquish control over physical infrastructure and limit their access to underlying operating systems.

Netskope Regain Visibility to Secure Digital Experience

SaaS performance, digital experience, and hybrid working productivity rely on device, app, SSE and network performance. See how proactively digital experience management (DEM) rapidly diagnoses and remediates issues so you can regain visibility to regain control, optimize and master employee digital experience.

How to create an identity federation between GCP and AWS using Tines

In this guest blog post, Marcus Hallberg and Attila Dulovics, senior security engineers at Spotify, share a Tines workflow they built to create identity federation between GCP and AWS. As modern organizations continue their journey into the cloud, they face the complex reality of a mix of cloud providers and on-premise infrastructure. This often happens due to acquisitions being made, necessary partner integrations, or other business and technical requirements that create a multi-cloud setup over time.

Striking a Balance Between Productivity and Security

Granting privileged access to an end user’s device is a common practice in organizations. Admins do it to give end users the ability to manage administrative tasks such as downloading applications and accessing resources on their devices. It can be done manually, which is cumbersome and introduces risks. Or it can be managed to improve user productivity without requiring additional IT help or intervention, so that IT can focus on higher priority tasks.

Monitor your Kubernetes security posture with Datadog Cloud Security Management

In recent years, the popularity of Kubernetes deployments has surged—as has the prevalence of security risks associated with the technology. Red Hat’s State of Kubernetes Security for 2023 reveals that 67 percent of organizations have encountered delays in application deployments due to Kubernetes-related security issues. Additionally, 37 percent have experienced significant revenue or customer losses stemming from Kubernetes security incidents.

Forward Networks Receives Gold Award for Cloud Computing Security Solution at the 2024 Globee Awards for Cybersecurity as well as the GOVIE Award for Compliance Acceleration at the 2024 Government Security Awards by Security Today

Forward Networks won the prestigious Gold designation for Cloud Computing Security at the 2024 Globee Awards for Cybersecurity. This recognizes Forward Networks' commitment to transforming how SecOps, CloudOps, and NetOps teams operate by creating a single source of truth for engineers with actionable insights that empower them to regain control over their networks.

Data Access Governance: The Blueprint of Cloud Data Access Management

In an era where data breaches are as common as they are damaging, securing sensitive information has become paramount for businesses across the globe. Data Access Governance stands at the forefront of this battle, ensuring that the right people have the right access to the right data at the right time. It's a holistic approach that not only fortifies data against unauthorized access but also enables organizations to harness its full potential responsibly and efficiently.

Outsmarting Cyber Threats: Etay Maor Unveils the Hacker's Playbook in the Cloud Era

In an era where cyber threats evolve as rapidly as the technology they target, understanding the mindset of those behind the attacks is crucial. This was the central theme of a speech given by Etay Maor, Senior Director of Security Strategy, of Cato Networks at the MSP EXPO 2024 Conference & Exposition in Fort Lauderdale, Florida. Titled, “SASE vs.

Understanding the Hesitance of MSPs Towards Google Workspace

I recently saw a post on LinkedIn from a managed service provider (MSP) who had turned down an opportunity because the prospect used Google Workspace. While I understood their reasoning for doing this, it did get me thinking: Why are MSPs so hesitant to work with Google? I created a casual poll on LinkedIn and the results revealed a significant trend: a majority of MSPs seem to be bypassing Google Workspace as a viable service offering.

Microsoft Azure Red Hat OpenShift (ARO) and Trilio Data Protection: Uniting Cloud-Native Excellence

With the exponential growth of cloud adoption and the widespread shift to Kubernetes as the de facto orchestration platform, Red Hat OpenShift emerges as a leading solution. Coupled with the robust cloud infrastructure of Microsoft Azure, Red Hat OpenShift on Azure (ARO) is a managed service that offers OpenShift clusters on Microsoft Azure. It is jointly engineered and operated by Microsoft and Red Hat with an integrated support experience.