Cloud Security

Veriti researchers say the attacks on cloud services call for a proactive, security-first approach.

Threat group leverages misconfigured AWS environments.

Massive botnet of over 130,000 hacked devices bypass MFA.

BleepingComputer reports that attacks leveraging old critical ThinkPHP Framework and ownCloud file sharing and syncing platform vulnerabilities to facilitate arbitrary operating system command execution and data compromise have surged in recent days.

International shipping solution Hipshipper — which is leveraged by Amazon, Shopify, and eBay sellers to deliver goods to more than 150 countries — had more than 14.3 million records inadvertently exposed by an unsecured Amazon AWS bucket, Cybernews reports.

Microsoft 365 account takeovers facilitated by HTTP clients.

Software supply chain compromise possible with neglected AWS S3 buckets.

Amazon Redshift enhanced with new default breach deterrents.