Cloud security has become a significant issue as organizations increasingly move their workload to the cloud. A misconfigured cloud can leave organizations vulnerable to attacks.
Researchers discovered over 9,600 organizations with misconfigured Google Group accounts, leaving key credentials, email exchanges and sensitive information searchable to the public.
Analysis of over 1,000 open-source serverless applications revealed that 21% of them have critical vulnerabilities or were misconfigured. What does this mean for DevOps?
Security researchers reported a security flaw in Google Apps Script that can enable hackers and cybercriminals to deliver Google Drive-hosted malware when abused and exploited.
A year that saw major data breaches, including some notable ones from companies like Uber and Equifax, just saw another breach that will likely rank as among 2017’s most notable incidents.
Classified information from the NSA and US Army was left exposed on a misconfigured cloud server. Over 100 gigabytes of data about old intelligence-sharing projects was found on an unsecured and public Amazon Web Service (AWS) storage server.
DJI, one of the largest drone manufacturers in the world, was the subject of an information exposure incident when a researcher discovered that it left the private key for its HTTPS certificate on GitHub for four years.