Aqua Security

NOVEMBER 3, 2021

As part of the campaign, the threat actors used a container escape technique that leverages the CGroup release_agent feature. This technique allows an attacker to break out from the container and compromise the host and, potentially, the entire network of an organization.

Network 122

Network Organization 122

Lacework

SEPTEMBER 19, 2023

How did the cloud attacker escape? Cloud threat detection is often overlooked when considering the full spectrum of capabilities in cloud infrastructure and security tools. This threat linkage helps end users understand the most effective ways to remediate and reduce the potential effects of attacks. They ransomware.

Google Cloud 113

Google Cloud Cloud Storage .Net 113

Lacework

FEBRUARY 7, 2024

With limited time and resources, companies face a dilemma — should they invest in risk mitigation to build stronger defenses, or focus on threat detection to quickly address breaches? As security researchers, we’re constantly analyzing and anticipating cyber threats. Who’s behind the threats? The truth is that both are crucial.

Weak Development Team 109

Weak Development Team Malware Cloud Internet 109

Palo Alto Networks

DECEMBER 29, 2022

Last year’s most popular posts on the Unit 42 Threat Research blog let us examine what the events of 2022 can tell us about the year to come. Threat actors are tremendously fond of recycling and reusing old techniques, as long as they continue to have a high rate of return. Threat Brief: Ongoing Russia and Ukraine Cyber Activity.

Malware 68

Malware Linux Telecommunications Government 68

Prisma Clud

JUNE 13, 2023

All software supply chain attacks share a core trait: they allow a threat actor to break into an organization’s IT estate by exploiting software vulnerabilities created by entities other than the organization. Imagine one of the applications you’ve developed contains a vulnerable open-source library.

Software 59

Software Open Source How To Infrastructure 59

The Accidental Successful CIO

SEPTEMBER 13, 2023

Once any of the decoys are either accessed or probed in any way, a centralized console alerts the network security team, so they know to start investigating the source of that activity. The goal is for the team to contain the intruder. The security threat landscape is constantly changing.

Firewall 52

Firewall Network Study Technology 52

Prisma Clud

JANUARY 23, 2024

Lacking the capacity to cross-correlate risk factors such as misconfigurations, overly permissive identities and sensitive data creates gaps that lead to ineffective threat analysis and poor risk prioritization. Detect and block exploits such as container escapes and OWASP Top 10 security risks in runtime to prevent potential breaches.

Weak Development Team 78

Weak Development Team Cloud Government Network 78