Tenable

JUNE 13, 2022

Microsoft states that products and scenarios listed under that heading have “the highest potential impact to customer security.”. These flaws allow a user to escalate privileges to that of the root user within the underlying Apache Spark virtual machines, or to poison the hosts file of all nodes in an Apache Spark pool.

Azure 52

Azure Technical Review Weak Development Team Analytics 52

Prisma Clud

APRIL 20, 2023

Exploiting privileged operations for malicious intent is one of the biggest threats in the public cloud. Such operations allow bad actors to perform a range of attack techniques, such as lateral movement, credential access, and data exfiltration. Imagine that a privileged user account has been compromised.

Azure 52

Azure Policies Cloud Spyware 52

Tenable

MARCH 20, 2024

Visibility serves as the cornerstone of security, offering organizations the means to monitor, analyze, and safeguard their digital infrastructure effectively. Moreover, real-time visibility enables security teams to proactively mitigate threats before they can escalate into a full-blown crisis.

IoT 70

IoT How To Network Tools 70

Ivanti

AUGUST 3, 2021

The malware can contain an exploit kit that automatically executes malicious programmatic code that performs a privilege escalation to the system root device level, where it will grab credentials and attempt to discover unprotected network nodes to infect via lateral movement. There are 4 main types of ransomware.

Malware 98

Malware Backup Mobile Storage 98

Ivanti

APRIL 4, 2021

Several years back before the COVID-19 pandemic hit and the work-from-home shift took hold, we wrote a blog about how the mobile-centric zero trust framework removed the traditional perimeter security controls to protect the corporate enterprise network and all connected endpoints from cybercriminals.

Policies 66

Policies Mobile Malware Firewall 66

Netflix Tech

DECEMBER 23, 2020

In this post, we describe how Titus agents leverage user namespaces to improve the overall security of the Titus agent fleet. Titus is a multi-tenant system, allowing multiple teams and users to run workloads on the system, and ensuring they can all co-exist while still providing guarantees about security and performance.

Linux 114

Linux Software Review Systems Review Metrics 114

Tenable

JANUARY 21, 2021

With the rise of daisy-chained cyberattacks, security teams must consider the contextual risk of each vulnerability, including its potential to be leveraged in a full system compromise. Faced with limited time and resources, every security team must prioritize threats. There are a number of examples of these “daisy-chained” attacks.

Malware 102

Malware Software Review Weak Development Team Technical Review 102

Tenable

APRIL 24, 2023

The use of Kubernetes introduces complexity to the modern attack surface and requires a different approach to security than traditional IT infrastructure. Security teams need a base understanding of Kubernetes architecture, configurations and deployment processes to effectively manage risk. Here’s what you need to know.

Software Review 52

Software Review Policies Systems Review Technical Review 52

Lacework

OCTOBER 24, 2023

Editor’s note: This article serves as a summary of the content presented by Cloud Security Researcher Tareq Alkhatib during his session at ATT&CKCON 4.0. ATT&CK serves as a common language to various security teams, including Red Teams, Forensics Engineers, Cyber Threat Intelligence (CTI) Teams, etc.

Malware 113

Malware Systems Review Media Internet 113

Prisma Clud

JULY 3, 2023

Cloud data breaches are on the rise. In this post I’ll walk you through recent cloud threat data from Unit 42’s Cloud Threat Report, Volume 7: Navigating the Expanding Attack Surface. This allowed attackers to perform reconnaissance and move laterally with ease. There’s no hiding from it.

Cloud 52

Cloud Authentication Azure Policies 52

Ivanti

APRIL 13, 2021

My cybersecurity newsfeeds are often filled with stories of successful ransomware attacks almost daily against healthcare providers, schools, and government agencies. According to the Verizon Mobile Security Index 2021 (MSI) report, 79% of respondents saw remote working increase in their company. What is phishing?

Artificial Inteligence 98

Artificial Inteligence Malware Mobile Machine Learning 98

Palo Alto Networks

OCTOBER 11, 2021

The most recent Unit 42 Cloud Threat Report contains the high-level results of a red team exercise performed against a SaaS customer’s continuous integration and continuous development (CI/CD) pipeline. The organization did not have these security measures enabled on their other 49+ AWS accounts.

Cloud 74

Cloud Exercises Weak Development Team AWS 74

Lacework

DECEMBER 13, 2022

We know cloud environments are incredibly complex. Which means cybersecurity is a race against time and the speed to respond is measured in dollars and cents. As cloud threats grow in volume and sophistication, it is almost impossible for businesses to fix every risk or vulnerability in their cloud environment.

Weak Development Team 52

Weak Development Team Cloud Internet Compliance 52