Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

September 2024

Data Security Best Practices for Cloud CRM Systems as Adoption Surges

For the past few years, the CRM market has witnessed steady growth and it is projected to reach $89 billion by 2024. Estimates are that this growth will continue into the foreseeable future. Essentially, CRM systems have come to stay and have become the backbone of many organizations. However, the bleak state of cybersecurity cuts across many industries, and CRM systems are equally vulnerable.

Cloudflare Abuse: How the SloppyLemming APT is Targeting Sensitive Organizations

In today’s cyber landscape, threat actors are becoming increasingly sophisticated, often leveraging free tools and cloud services to launch targeted attacks. One such group, known as SloppyLemming, is making waves by using platforms like Cloudflare Workers to engage in espionage against government and law enforcement agencies in the Indian subcontinent. This blog delves into their methods, targets, and how organizations can bolster their defenses against such threats.

Advancing cybersecurity: Cloudflare implements a new bug bounty VIP program as part of CISA Pledge commitment

As our digital world becomes increasingly more complex, the importance of cybersecurity grows ever more critical. As a result, Cloudflare is proud to promote our commitment to the Cybersecurity and Infrastructure Security Agency (CISA) ‘Secure by Design’ pledge. The commitment is built around seven security goals, aimed at enhancing the safety of our products and delivering the most secure solutions to our customers.

The IT Hour | macOS Keychain Protection & Fall Releases 09.27.24

Tom Bridge is back to tell us about macOS Keychain Protection & Fall Releases. Join us at 11:30 am ET The #IT Hour hosted by #JumpCloud is a #communityprogram focused on the life of #ITAdministrators. With the ever changing #ITlandscape, having community and professional networking opportunities is very valuable.

SaaS Security Posture Management/SSPM: A Must-Have for Securing Your SaaS Applications

As more companies adopt Software-as-a-Service (SaaS) apps, keeping these cloud-based systems secure has become crucial. While SaaS offers convenience, scalability, and flexibility, it also introduces significant security risks. Organizations must actively monitor and control the security of their SaaS environments. SaaS Security Posture Management / SSPM is becoming an essential tool for this task.

Complexity of Attack Surface Management in Cloud Environments

Legacy attack surfaces were small and simple. There were fewer servers and endpoints to protect. The tooling required to secure it was basic – perimeter firewalls, antivirus software, and server/network/application monitoring tools. When organizations migrate to the cloud, things change and become complex. For starters, on-premise infrastructure and applications can’t be left out in favor of the cloud. Most organizations run hybrid setups.

How CrowdStrike Hunts, Identifies and Defeats Cloud-Focused Threats

Adversaries’ persistent efforts to evade advancements in threat awareness and defense have shaped a cyber threat landscape dominated by their stealthy, fast-moving tactics. As they expand into the cloud environments where most organizations now operate, the need to hunt and remediate threats has become crucial.

SaaS Security: Protecting Your Cloud-Based Applications and Data

Software as a Service (SaaS) has quickly become popular and has changed the way businesses work by making them more scalable, flexible, and efficient. Cloud-based apps are convenient, but they also come with the duty of keeping them safe from cyber threats. As more businesses move private data to the cloud, security for SaaS has become very important. This is because the data is vulnerable to risks like cyberattacks, data breaches, and unauthorized access.

Bridging the cloud security skill gap with Sysdig Sage

Disruptive technologies have a learning curve in the pace of adoption and implementation. Training and education tend to follow a slower schedule and can have a hard time keeping up with discoveries happening on the bleeding edge. This is part of what led to the current cloud security skill gap. The cloud transformed software development, accelerating innovation and the pace of human creativity. But, we now know that it also formed new security challenges.

New standards for a faster and more private Internet

As the Internet grows, so do the demands for speed and security. At Cloudflare, we’ve spent the last 14 years simplifying the adoption of the latest web technologies, ensuring that our users stay ahead without the complexity. From being the first to offer free SSL certificates through Universal SSL to quickly supporting innovations like TLS 1.3, IPv6, and HTTP/3, we've consistently made it easy for everyone to harness cutting-edge advancements.

Encryption at rest in Elastic Cloud: Bring your own key with Google Cloud

Now that we’ve introduced Elastic Cloud encryption at rest and walked you through setting it up in AWS and Azure, it’s time to get you set up in Google Cloud. In this final blog of the series, we will explain how encryption at rest works with Google Cloud Key Management Service (KMS) and then show you how to apply a Google Cloud KMS key to an Elastic Cloud Hosted deployment for encrypting data and snapshots at rest.

CASB Requirements: What You Need to Know to Secure Your Cloud

In the modern cloud landscape, the question isn’t whether or not you need a cloud access security broker (CASB) — it’s how to choose the right one and implement it effectively. Malicious attacks are on the rise, and so are remote and hybrid workforces, making it more important than ever to be proactive about data security.

7 CASB Use Cases to Protect Cloud-Based Resources

Cybersecurity leaders already know the importance of a data loss prevention (DLP) solution. They also know DLP has its limits. As cloud applications have grown more common, they’ve introduced gaps in the DLP shield. SaaS apps present new opportunities for data leakage, accidental sharing, and insider threats. To plug those gaps, you need a cloud access security broker (CASB).

Cloudflare helps verify the security of end-to-end encrypted messages by auditing key transparency for WhatsApp

Chances are good that today you’ve sent a message through an end-to-end encrypted (E2EE) messaging app such as WhatsApp, Signal, or iMessage. While we often take the privacy of these conversations for granted, they in fact rely on decades of research, testing, and standardization efforts, the foundation of which is a public-private key exchange.

Cloudflare partners with Internet Service Providers and network equipment providers to deliver a safer browsing experience to millions of homes

In 2018, Cloudflare announced 1.1.1.1, one of the fastest, privacy-first consumer DNS services. 1.1.1.1 was the first consumer product Cloudflare ever launched, focused on reaching a wider audience. This service was designed to be fast and private, and does not retain information that would identify who is making a request. In 2020, Cloudflare announced 1.1.1.1 for Families, designed to add a layer of protection to our existing 1.1.1.1 public resolver.

A safer Internet with Cloudflare: free threat intelligence, analytics, and new threat detections

Anyone using the Internet likely touches Cloudflare’s network on a daily basis, either by accessing a site protected by Cloudflare, using our 1.1.1.1 resolver, or connecting via a network using our Cloudflare One products. This puts Cloudflare in a position of great responsibility to make the Internet safer for billions of users worldwide. Today we are providing threat intelligence and more than 10 new security features for free to all of our customers.

The Cloud Security Confidence Gap: What Leaders Need to Know

In this increasingly cloud-first world, data protection is more important than ever. With so many organizations relying on cloud applications to get work done, keeping sensitive information secure is a top priority. But balancing convenient access with strong security measures is no easy feat. In fact, only a small fraction of security leaders feel truly confident in their current data security measures. Lookout recently surveyed 100 executives to get their take on data security in the cloud.

Introducing Ephemeral IDs: a new tool for fraud detection

In the early days of the Internet, a single IP address was a reliable indicator of a single user. However, today’s Internet is more complex. Shared IP addresses are now common, with users connecting via mobile IP address pools, VPNs, or behind CGNAT (Carrier Grade Network Address Translation). This makes relying on IP addresses alone a weak method to combat modern threats like automated attacks and fraudulent activity.

Effortlessly Migrate Your AKS Clusters to Azure Container Storage Using CloudCasa

Azure Container Storage is a cloud-based volume management, deployment, and orchestration service built natively for containers. It integrates with Kubernetes, allowing you to dynamically and automatically provision persistent volumes to store data for stateful applications running on Kubernetes clusters.

A Comprehensive Guide to Post-Breach Services

As businesses increasingly migrate to the cloud, leveraging its scalability, flexibility, and cost efficiency, they also face the rising threat of cyberattacks. Despite advanced preventive measures, breaches happen. When they do, knowing how to respond is critical to minimising damage, ensuring compliance, and maintaining customer trust. This guide delves into the essential post-breach services businesses need to implement to recover and strengthen their cybersecurity posture.

How DevOps Automation Enhances Cloud Security

When applied to cloud security, DevOps automation is able to speed up delivery while cutting down on errors. This blend results in faster deployments with a lower likelihood of vulnerabilities sneaking through. Here's a closer exploration of how this plays out, and why you should be making the most of tools in this category as part of your own operations.

Emerging cybersecurity trends: what tech-savvy users should watch for

The digital landscape is evolving rapidly, and with it, the threats posed by cybercriminals are becoming more sophisticated. Staying informed about the latest cybersecurity trends is crucial for anyone who wants to protect their digital footprint. Here, we delve into key trends that tech-savvy users should be aware of.

How Cloudflare is helping domain owners with the upcoming Entrust CA distrust by Chrome and Mozilla

Chrome and Mozilla announced that they will stop trusting Entrust’s public TLS certificates issued after November 12, 2024 and December 1, 2024, respectively. This decision stems from concerns related to Entrust’s ability to meet the CA/Browser Forum’s requirements for a publicly trusted certificate authority (CA).

Egnyte for Google Workspace: A Secure and Seamless Collaboration Environment

Google Workspace is a popular suite of cloud-based productivity and collaboration tools that enables users to create, co-edit, and share documents, spreadsheets, presentations, and more. While Google Workspace has many benefits, more than the platform is needed to meet the needs of businesses looking for more control, security, and governance over their critical content. They need a partner solution that integrates seamlessly with Google and prioritizes secure content collaboration - in comes Egnyte.

5 Key Features to Look for in a Security Camera to Protect Your Home

Were you looking for a security camera to secure your home but not sure which features matter the most? In this world, protecting the safety of your home and loved ones is the most important thing. Home security cameras have become an integral part of safety and security that provides peace of mind regarding the assets. So here we'll take a closer look at five key features you should consider when choosing a security camera to protect your home.

CrowdStrike Drives Cybersecurity Forward with New Innovations Spanning AI, Cloud, Next-Gen SIEM and Identity Protection

Today’s threat landscape is defined by adversaries’ increasing speed and quickly evolving tactics. Now more than ever, it is imperative organizations unify and accelerate their security operations to detect, identify and respond to threats at the rapid pace of the adversary. This isn’t always straightforward.

Inside the Cloud: Unintended Privileges

This is the third article in a series about cloud-based attack vectors. Check out our last article about Cloud-Based ransomware! As Identity Access Management (IAM) becomes more complex, it becomes possible for an attacker to exploit the capabilities of legitimate permissions alone or in combination, escalating privileges and gaining potentially devastating levels of access. Because these privileges are legitimate, these attacks can be difficult to detect until the damage is already done.

What is CASB in Cyber Security?

Businesses increasingly use cloud services like Google Workspace, Amazon Web Services (AWS), Hubspot, and Dropbox to improve work productivity and drive innovation. However, this accelerated shift to cloud platforms has exposed businesses to new security challenges, such as unauthorized data breaches and compliance violations. A Cloud Access Security Broker (CASB) is a powerful tool against these issues, delivering unmatched visibility and control over data to protect enterprises against these threats.

The Evolution of CASB: How Cloud Security Has Changed Over the Years

Since organizations use cloud computing for their commercial goals, data storage, and improvement of collaboration, protecting these services has become a significant concern. Current security solutions developed for premise-based environments are insufficient for today's cloud-first world.

Application Security for Cloud Native Applications

In the digital age, business leaders see software teams as core to the business and are demanding them to innovate faster in response to market and competitive demands. Organizations are on path of fast iteration - experimenting with new products or features, gauge customer feedback, adopt or drop and move to the next thing. The pace of change is not an option but existential for organizations. Organizations that can adapt will gain market shares and organizations that cannot, will cease to exist.

Top open-source CSPM projects to secure your cloud infrastructure

As more organizations move their critical infrastructure to the cloud, ensuring security has become a top priority. This is where Cloud Security Posture Management (CSPM) comes in. CSPM solutions validate the configuration of cloud services from a security perspective, ensuring alignment with best practices and compliance frameworks such as CIS Benchmarks, PCI-DSS, NIST, and others.

The Secure Cloud-Native Journey: Development, Deployment, and Defense

David Hendri, Solvo’s CTO & Co-founder, and David Melamed, Jit’s CTO & Co-founder, discuss the shift from traditional software security to modern cloud environments. They cover how cloud visibility, automation, and vulnerability prioritization improve security without slowing developers and share insights on future trends, including AI’s impact on cloud security.

Navigating the Cloud Chaos: 2024's Top Threats Revealed

Misconfigurations (when cloud computing assets are set up incorrectly, leaving them vulnerable to unauthorized access, data breaches, and operational disruptions) and inadequate change control top the list of cloud security threats in 2024, rising from third place the year before. It's clear that the transition to cloud computing has amplified the challenges of configuration management, making it critical for entities to adopt cloud-specific configurations.

Enhancing Edge Environment Data Protection with CloudCasa, AKS, and Azure Arc

As businesses continue to embrace the flexibility and scalability of cloud-native applications managed by Azure Kubernetes Service (AKS), ensuring robust data protection for them across diverse locations, including edge environments, becomes paramount. For organizations leveraging Kubernetes at the edge with Azure Arc, the need for a comprehensive and easily managed backup and disaster recovery solution is crucial.

ASM vs CASM: Understanding the key differences

There is a pressing need to protect an organisation’s digital assets against cyber attacks and it has never been more critical. The increasing complexity and dynamic nature of IT environments mean that traditional security measures often fall short. This has led to the emergence of new defensive approaches, such as attack surface management (ASM) that proactively safeguard against cyber threats.

Protecting APIs from abuse using sequence learning and variable order Markov chains

Consider the case of a malicious actor attempting to inject, scrape, harvest, or exfiltrate data via an API. Such malicious activities are often characterized by the particular order in which the actor initiates requests to API endpoints. Moreover, the malicious activity is often not readily detectable using volumetric techniques alone, because the actor may intentionally execute API requests slowly, in an attempt to thwart volumetric abuse protection.

Inside the Cloud: Cloud-Based Ransomware

This is the second in a series of articles about cloud-based attack vectors. Check out our last article about admin takeovers! Inside the Cloud: Attacks & Prevention – Administrative Account Compromise Ransomware has long been associated with takeovers of endpoints. However, attackers are evolving to target cloud environments – and the effects can be devastating.

How Cybersecurity Risk Assessments Will Need to Evolve for 2025

2025 is drawing near, and the cybersecurity scene is changing quickly. Organizations must adapt how they undertake cybersecurity risk assessments in tandem with the ongoing evolution of technology and the escalating sophistication of cyber-attacks. In order to address the difficulties of the near future, cybersecurity risk assessments will need to change in ten key areas, as this essay examines.

Vanta continues AWS momentum with Security Competency achievement

Vanta has achieved the Amazon Web Services (AWS) Security Competency status. This designation recognizes that Vanta excels at providing deep AWS technical expertise and integrations that help customers achieve their cloud security and compliance goals. ‍ Over half of Vanta’s 8,000+ customers leverage AWS. Achieving the AWS Security Competency reinforces our continual commitment to delivering deeply automated, integrated product experiences.

Is it Possible to See a Full Cloud Inventory in a Single View?

Join networking professionals Mike Lossman and Chris Naish as they discuss how to efficiently manage cloud inventory across AWS, Azure, and GCP cloud platforms using Forward Networks. Keeping tabs on cloud environments can be an arduous process requiring engineers to log into each cloud to gather inventory data. Chris shows how to create a centralized dashboard with Forward Networks, aggregating and filtering information from all three clouds, allowing users to view data like compute instances, VPCs, and subnets in a single location.

Customers get increased integration with Cloudflare Email Security and Zero Trust through expanded partnership with CrowdStrike

Today, we’re excited to expand our recent Unified Risk Posture announcement with more information on our latest integrations with CrowdStrike. We previously shared that our CrowdStrike Falcon Next-Gen SIEM integration allows for deeper analysis and further investigations by unifying first- and third-party data, native threat intelligence, AI, and workflow automation to allow your security teams to focus on work that matters.

Cloud TAP Arrives for Traffic Packet Captures

Netskope customers now have the option for traffic packet captures for Netskope Intelligent SSE for egress traffic from remote users or offices to the Netskope One cloud platform. Key to enabling this new capability is the NewEdge private network where Cloud TAP is available across the globe in data centers. Networking, infrastructure and operations, and security teams often require the following using network and cloud TAPs.

Demystifying Data Protection in the Cloud: Runtime vs. At Rest

In the dynamic landscape of data security, navigating the complexities of modern architectures requires a sophisticated approach. The exponential growth of data and the proliferation of cloud services require advanced security strategies that can adapt to rapidly changing conditions. Traditional methods of data protection, while foundational, often fall short in addressing the needs of today’s fast-paced cloud environments.

Unleashing the Power of Proactive DEM Enterprise - Netskope Demo

Proactive DEM Enterprise offers a powerful site-centric view that when combined with user monitoring, helps pinpoint the source of user experience issues—whether at a specific site, connecting to the Netskope NewEdge POP, or the ISP. This ensures full performance visibility, empowering organizations to achieve unparalleled visibility, optimize performance, and elevate user experience across their network infrastructure.

The IT Hour | IT Project Management & Certs 09.06.24

Pam L joins us to talk about IT project management & certifications to help you manage better. Join us at 11:30 am ET The #IT Hour hosted by #JumpCloud is a #communityprogram focused on the life of #ITAdministrators. With the ever changing #ITlandscape, having community and professional networking opportunities is very valuable.

The Intersection of Cybersecurity and Cloud Contact Centers: Best Practices for Data Protection

As organizations migrate their operations to the cloud, the need for robust cybersecurity measures has never been more critical. Cloud contact centers, which have become increasingly popular due to their flexibility and scalability, are no exception to this trend. While these platforms offer numerous advantages, they also present unique data protection and security challenges.

Why Standard Approaches to Cloud Data Security Fall Short

Prioritizing cloud security looks different for every business. However, many businesses migrating to the cloud rely on conventional data security methods, including built-in tools from cloud providers and ad hoc measures. Unfortunately, these traditional approaches often fall short, leaving critical gaps in protection and hindering true cloud-powered innovation. Ensuring secure cloud services are multifaceted, let’s dive deeper into the impacts, strategies, and solutions.

3 Essential Capabilities for Modern Cloud Data Protection

Businesses migrating to the cloud face a complex landscape requiring advanced cloud data protection measures. Conventional security approaches often fail to provide the needed flexibility and comprehensiveness for modern cloud environments. To truly harness the cloud’s power, businesses need three essential capabilities: unified control, federated protection, and comprehensive data protection mechanisms.

Introduction to Amazon S3 Storage Classes

A good deal of my time and efforts in educating customers today is around object storage in general and AWS S3 in particular. In case you missed it 11:11 Systems has recently taken our partnership with AWS to the next level, making all of their S3 class storage available to you with our award winning support and flexible pricing options.

Cloudy with a chance of breach: advanced threat hunting strategies for a hyperconnected and SaaSy world

When workloads moved to the cloud, a huge burden was lifted from the enterprise in infrastructure and operational overhead. This transition also brought with it the “shared responsibility” model, where cloud providers took on much of the responsibility previously relegated to expensive engineering teams.

Cryptominers in the Cloud

Over the past decade, Bitcoin’s value has increased more than 200-fold. Similarly, other cryptocurrencies have also seen significant growth, prompting many individuals to engage in mining for profit. This rise in cryptocurrency mining has led to a substantial increase in the use of cryptominers. As organizations increasingly migrate their computing workloads to the cloud for various benefits, attackers have shifted their focus to these cloud resources for cryptocurrency mining.

A Comprehensive Guide to SOPS: Managing Your Secrets Like A Visionary, Not a Functionary

Have you heard about SOPS? If you have already been in a situation where you needed to share sensitive information with your teammates, this is for you. Today, let's have a look at how it works and how to use it with various key management services such as AWS KMS and HashiCorp Vault.

How Cloud Computing Enhances Cybersecurity Strategies

Cloud computing for the purpose of cybersecurity can be more useful than ever. Many businesses around the world are becoming more reliant on the technology for the purpose of scalability and cost-effectiveness when it comes to data storage. Yet, using it for cybersecurity purposes might give them a better chance to protect even the most sensitive data that must be protected in the first place. This guide will take a look at what cloud computing and cybersecurity can provide when they work together. Let's discuss everything you need to know right now.

The Ban That Wasn't: What Happened to the FTC's Non-Compete Ban?

Today was supposed to mark a significant shift in employment law in the US: the Federal Trade Commission’s (FTC) ban on non-compete clauses was set to go into effect. However, this anticipated change was blocked by a US District Court in Texas, leaving many wondering about the implications for small and medium-sized enterprises (SMEs) and the IT professionals they employ.
Featured Post

A Lack of Resources and Talent Leaves UK SMEs Dangerously Exposed

In the last few years, we have witnessed some of the most seismic changes to the IT security landscape; from global pandemics and geo-political issues to a global energy crisis, to growing cybersecurity threats, to multiple country elections and subdued economic conditions. But, regardless of stretched IT and cybersecurity budgets, and a significant IT skills shortage, threat actors continue to innovate as cyber threats evolve at breakneck speed; organisations have no choice but to defend themselves.

SaaS Security Best Practices for Modern Organizations

Most modern organizations run on SaaS applications, and many use them to store sensitive data. The global SaaS market reached a total value of $206 billion in 2023, and is expected to climb to $247 billion by the end of 2024. Organizations must employ a complex system of practices to keep their SaaS apps secure and their data safe. Because SaaS apps are delivered through the cloud, they must be managed and secured differently than other types of software.

Making progress on routing security: the new White House roadmap

The Internet can feel like magic. When you load a webpage in your browser, many simultaneous requests for data fly back and forth to remote servers. Then, often in less than one second, a website appears. Many people know that DNS is used to look up a hostname, and resolve it to an IP address, but fewer understand how data flows from your home network to the network that controls the IP address of the web server.