Categoria: Cloud Security

Severe Azure Vulnerability Led to Unauthenticated Remote Code Execution

A high-severity vulnerability in Azure Service Fabric Explorer could have allowed a remote, unauthenticated attacker to execute arbitrary code.

The post Severe Azure Vulnerability Led to Unauthenticated Remote Code Execution appeared first on SecurityWeek.

Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data

An Azure Active Directory (AAD) misconfiguration leading to Bing.com compromise earned Wiz researchers a $40,000 bug bounty reward.

The post Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data appeared first on SecurityWeek.

CISA Ships ‘Untitled Goose Tool’ to Hunt for Microsoft Azure Cloud Infections

The U.S. government’s cybersecurity agency ships a new tool to help network defenders hunt for signs of compromise in Microsoft’s Azure and M365 cloud deployments.

The post CISA Ships ‘Untitled Goose Tool’ to Hunt for Microsoft Azure Cloud Infections appeared first on SecurityWeek.

CISA Seeks Public Opinion on Cloud Application Security Guidance

CISA this week announced it is seeking public input on draft guidance for securing cloud business applications.

The post CISA Seeks Public Opinion on Cloud Application Security Guidance appeared first on SecurityWeek.

Webinar Tomorrow: Entering the Cloud Native Security Era

Join SecuityWeek and LogRhythm as we dive into security risks associated with SaaS, as well as best practices for mitigating these risks and protecting data.

The post Webinar Tomorrow: Entering the Cloud Native Security Era appeared first on SecurityWeek.

Cisco to Acquire Valtix for Cloud Network Security Tech

Cisco announced plans to acquire Valtix, an early-stage Silicon Valley startup in the cloud network security business.

The post Cisco to Acquire Valtix for Cloud Network Security Tech appeared first on SecurityWeek.

Cloud Security Firm Wiz Raises $300 Million at $10 Billion Valuation

Cloud security company Wiz has raised $300 million in a Series D funding round that brings the total raised by the company to $900 million.

The post Cloud Security Firm Wiz Raises $300 Million at $10 Billion Valuation appeared first on SecurityWeek.

Zscaler to Acquire Israeli Startup Canonic Security

Zcaler plans to acquire Israeli startup Canonic Security to expand into the red-hot software supply chain security business.

The post Zscaler to Acquire Israeli Startup Canonic Security appeared first on SecurityWeek.

Gem Security Gets $11 Million Seed Investment for Cloud Incident Response Platform

Israeli venture group Team8 has bankrolled an $11 million seed-stage investment in Gem Security, a startup with ambitious plans in the cloud threat detection and incident response space.

Gem Security, based in Tel Aviv, emerged from stealth Wednesday with technology that promises to give corporate security teams a practical way to manage threat detection, investigation and response in cloud deployments.

The company said its product supports all major infrastructure platforms — AWS, Azure, Google Cloud and Kubernetes — and integrates with identity providers, source code repositories and secrets managers, leveraging the additional data for context analysis.

Gem Security and its investors are betting that there’s a growing market for enabling cloud security operations as attack surfaces expand exponentially with enterprise digital transformation activities.

“The adoption of cloud infrastructure is increasing and diversifying the attack surface for organizations. 90% of all organizations use more than one cloud provider,” Gem Security said in a note announcing the funding.

“The expansion in attack surface is rarely paralleled with coverage by detection and response initiatives, leaving organizations unaware of a variety of threat vectors. 79% of companies have experienced at least one cloud data breach in the last 18 months, with 43% of companies reporting ten or more,” the company added.

While there is no shortage of products for detection and response, Gem Security is arguing that legacy approaches fall short of providing tooling for the cloud era. Today, the company says companies must work continuously on preparation, detection, investigation and response to cloud data threats.

The post Gem Security Gets $11 Million Seed Investment for Cloud Incident Response Platform appeared first on SecurityWeek.

Sentra Raises $30 Million for DSPM Technology

Sentra, a cloud data security company with roots in New York and Tel Aviv, has raised a $30 million funding round as investors continue to place big bets on the DSPM (data security posture management) category.

The $30 million Series A comes just 18 months after Sentra’s launch with backing from Bessemer Venture Partners and brings the total raised to $53 million.

Sentra said it attracted several new investors in the latest round, including Standard Investments, Munich Re Ventures, Moore Strategic Ventures, Xerox Ventures and INT3.

Sentra is among a cadre of well-funded startups — Symmetry Systems ($15 million raised), Veza ($110 million raised), Dig Security ($45 million funding) Laminar ($30 million), Securiti.ai ($81 million) and Normalyze ($22 million) — selling machine learning technology and tools to help businesses pinpoint security risks to digital assets in multi-cloud environments.

The company, which maintains headquarters in Tel Aviv, Israel, is working on technology to allow security teams to gain full visibility and control of cloud data, as well as protect against sensitive data breaches across the entire public cloud stack.

Sentra said its software can automatically detect if sensitive data is vulnerable due to misconfigurations, over-permissions, unauthorized access, data duplication or other security issues.

The post Sentra Raises $30 Million for DSPM Technology appeared first on SecurityWeek.