As organizations race to adopt generative AI (GenAI) to drive efficiency and innovation, they face a new and urgent security challenge. While AI-driven tools and large language models (LLMs) open vast opportunities, they also introduce unique vulnerabilities that adversaries are quick to exploit. From data exposure to supply-chain risks, the potential for threats to AI systems … [Read more...] about CrowdStrike Launches AI Red Team Services to Secure AI Innovation
Services
VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware
Nov 06, 2024Ravie LakshmananSaaS Security / Threat Detection An ongoing threat campaign dubbed VEILDrive has been observed taking advantage of legitimate services from Microsoft, including Teams, SharePoint, Quick Assist, and OneDrive, as part of its modus operandi. "Leveraging Microsoft SaaS services — including Teams, SharePoint, Quick Assist, and OneDrive — the attacker … [Read more...] about VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware
Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services
Oct 28, 2024Ravie LakshmananCloud Security / Cyber Attack A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive Panda that infected them with a previously undocumented post-compromise toolset codenamed CloudScout. "The CloudScout toolset is capable of retrieving data from various cloud services by … [Read more...] about Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services
Hidden dangers of free VPN services
Regarding VPNs, a popular refrain these days goes something like: “Why bother paying for a VPN when there are tons of free ones out there?” But are free VPN services truly free? This post explains why thinking they are is misguided, and offers the optimal solution: one of the fastest and most secure VPN apps on the planet. First there was: “There’s no such thing as a free … [Read more...] about Hidden dangers of free VPN services
Elastic Cloud is now available on Amazon Web Services (Zurich)
Elastic Cloud gives you the flexibility to run where and how you want. Deploy in the cloud on Google Cloud, Microsoft Azure, Amazon Web Services, or all the above. You can choose to use our managed service offering or manage the service yourself with built-in automation and orchestration tools.When you log in to the Elastic Cloud console, simply select your region and preferred … [Read more...] about Elastic Cloud is now available on Amazon Web Services (Zurich)
CrowdStrike Launches SEC Readiness Services to Prepare for New Regulations
CrowdStrike is today debuting CrowdStrike SEC Readiness Services to guide organizations along the path to compliance as they navigate the new SEC cybersecurity disclosure rules. These services, powered by the AI-native CrowdStrike Falcon® XDR platform and industry-leading CrowdStrike Services team, give customers the insight they need to harden defenses, make materiality … [Read more...] about CrowdStrike Launches SEC Readiness Services to Prepare for New Regulations
New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services
Sep 18, 2023THNCloud Security / Cryptocurrecy A novel cloud-native cryptojacking operation has set its eyes on uncommon Amazon Web Services (AWS) offerings such as AWS Amplify, AWS Fargate, and Amazon SageMaker to illicitly mine cryptocurrency. The malicious cyber activity has been codenamed AMBERSQUID by cloud and container security firm Sysdig. "The AMBERSQUID operation was … [Read more...] about New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services
Revolutionising Australian government services with generative AI: A new era of engagement
The disruptive potential of generative AI is increasingly recognised across sectors. State and local government agencies are poised for innovation, with tools like ChatGPT, Bard, and Elasticsearch leading the way. It's crucial for government leaders to organise their data efficiently and securely harness generative AI for enhanced citizen engagement.Generative AI's potential … [Read more...] about Revolutionising Australian government services with generative AI: A new era of engagement
Comparing OpenSearch Managed Services | Logz.io
In March of 2022, Elastic decided to close source the most popular log management and analytics solution in the world: the ELK Stack. Millions chose ELK as their logging platform and made it the heart of their troubleshooting operations because it was open source. And suddenly, it wasn’t – leaving many looking for other options. Shortly after, AWS launched OpenSearch and … [Read more...] about Comparing OpenSearch Managed Services | Logz.io
Inside the MITRE ATT&CK Evaluation: How CrowdStrike’s Elite Managed Services Operate in the Real World
Following CrowdStrike’s strong performance in the first-ever MITRE ATT&CK® Evaluations for Security Managed Services Providers with 99% detection coverage, we take a deep dive into the testing process and how our elite managed services operate in the real world. We recently announced CrowdStrike achieved 99% detection coverage in the inaugural MITRE ATT&CK Evaluations … [Read more...] about Inside the MITRE ATT&CK Evaluation: How CrowdStrike’s Elite Managed Services Operate in the Real World