Cloud adoption has revolutionized organizations in recent years, driven by its ability to prevent data loss, enhance security through centralized management, drive resource scalability and reduce costs. Most organizations are already reaping the benefits of cloud transformation. Along with the advantages of cloud adoption come new and evolving risks. Adversaries are growing … [Read more...] about Cloud Security Takes the Stage at Fal.Con 2024
cloud
5 Steps to Take When Securing Google Cloud Resources
Securing the cloud has become increasingly complex as organizations adopt hybrid and multi-cloud resources to meet their demanding business requirements. It’s also more crucial than ever: From 2022 to 2023, CrowdStrike identified a 75% increase in cloud intrusions. As organizations migrate their workloads and assets to the Cloud, they must take the necessary steps to protect … [Read more...] about 5 Steps to Take When Securing Google Cloud Resources
Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts
Aug 16, 2024Ravie LakshmananCloud Security / Application Security A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contain credentials associated with cloud and social media applications. "Multiple security missteps were present in the course of this campaign, including the … [Read more...] about Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts
Encryption at rest in Elastic Cloud: Bring your own key with AWS KMS
Elastic Cloud Hosted deployments that have been encrypted with AWS KMS keys also support AWS KMS key security policies and features, such as key rotation and key revocation. Key rotation minimizes the risk of data leaks due to key compromise. Key revocation is an additional security measure, where access to encrypted data via a compromised key is terminated, either via … [Read more...] about Encryption at rest in Elastic Cloud: Bring your own key with AWS KMS
Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials
Jul 27, 2024NewsroomCybersecurity / Cloud Security Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a total of 59 downloads before it was taken down. It … [Read more...] about Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials
3 Key Components to Look For in a Cloud Detection and Response Solution
Adversaries are increasingly attacking cloud environments, as evidenced by a 75% surge in cloud intrusions year-over-year in 2023. They are also getting faster: The fastest breakout time was clocked at just over 2 minutes, according to the CrowdStrike 2024 Global Threat Report. Today’s adversaries are outpacing legacy security approaches. Disjointed point solutions can’t scale … [Read more...] about 3 Key Components to Look For in a Cloud Detection and Response Solution
Falcon Cloud Security Supports Google Cloud Run to Strengthen Serverless Application Security
We’re thrilled to share that the CrowdStrike Falcon® sensor now fully supports Google Cloud Run, bringing advanced security capabilities to your serverless applications. While we announced this at Google Cloud Next in April 2024, this blog goes deeper into the integration and shares how customers leveraging Google Cloud Run and CrowdStrike can deploy Falcon quickly to enhance … [Read more...] about Falcon Cloud Security Supports Google Cloud Run to Strengthen Serverless Application Security
Security Cloud Control: Pioneering the Future of Security Management
Organizations face a critical challenge today: attackers are exploiting the weakest links in their networks, such as unsecured users, devices, and workloads. This threat landscape is complicated by the shift from traditional data centers to a distributed environment, where protecting dispersed data across multiple touchpoints becomes complex. To address these threats, many … [Read more...] about Security Cloud Control: Pioneering the Future of Security Management
The State of Cloud Security Platforms and DevSecOps
A new survey by Cisco and Enterprise Strategy Group reveals the true contours of cloud native application development and security The pressure to drive revenue, increase growth, and boost productivity is pushing organizations to embrace cloud native applications. In many organizations, security is an afterthought in the development process, which can lead to vulnerabilities … [Read more...] about The State of Cloud Security Platforms and DevSecOps
Cisco Simplifies Cloud Security with AWS Cloud WAN Service Insertion
In conversations with customers about cloud infrastructure, I routinely hear two challenges when it comes to scaling their cloud deployments, these challenges include: Achieving secure connectivity across clouds, virtual private clouds (VPCs), regions, and on-premises networks Ensuring security is baked into the network architecture from the start. As customers grow their … [Read more...] about Cisco Simplifies Cloud Security with AWS Cloud WAN Service Insertion