Security researchers have identified a vulnerability in AMD processors that they have dubbed badRAM and which could allow threat actors with physical access to cloud computing environments to bypass encryption protections, reports The Record, a news site by cybersecurity firm Recorded Future. The flaw circumvents AMD’s Secure Encrypted Virtualization, which encrypts virtual machine memory to … Read more
Tel Aviv, Israel, Dec. 3, 2024, CyberNewswire — With Sweet, customers can now unify detection and response for applications, workloads, and cloud infrastructure Sweet Security today announced the release of its unified Cloud Native Detection and Response platform, designed to transform the way organizations protect their cloud environments in real time. Sweet’s platform integrates the … Read more
A Kaspersky investigation into cyber attacks targeting the industrial sector in Eastern Europe revealed the use of advanced tactics, techniques, and procedures (TTPs) by threat actors to compromise industrial organisations in the region. Industries such as manufacturing, industrial control system (ICS) engineering and integration have been particularly affected, emphasising the urgent need for enhanced cybersecurity … Read more
Cloud services have become a critical enabler for modern businesses, offering scalable, secure storage and processing capabilities. However, these same services are increasingly being exploited by ransomware groups as tools for both compromising systems and exfiltrating sensitive data. Ransomware exploits cloud services A recent report from SentinelLabs, The State of Cloud Ransomware in 2024, highlights … Read more
Fifteen years ago, I did a major survey into the use of cloud computing in financial services. Bear in mind this was really early days, and the results were quite nebulous. The main headline was that cloud computing needs better definition to succeed: The research report, which encompasses the views of over 230 financial professionals … Read more