cloud-security

Fortifying the Digital Frontier: CIS and SANS Forge Decades of Cybersecurity Excellence with AWS Cloud Integration

CIS and SANS extend their partnership, offering secure cloud infrastructure and expert training via AWS Marketplace to combat advanced threats.

Marcus Thorne General news

Apollo Discloses Major Cloud Data Breach Amidst Financial Sector Cyber Onslaught

Apollo suffers cloud data breach compromising sensitive personal data, part of ongoing financial sector attacks. Learn about forensic analysis and defense.

Marcus Thorne General news

Canadian Cybercrime Kingpin Pleads Guilty: Unpacking Snowflake Extortions and AT&T Data Heist

Connor Riley Moucka pleads guilty to Snowflake extortions and AT&T data theft, highlighting critical cloud and supply chain security vulnerabilities.

Marcus Thorne General news

ISC Stormcast 2026: AI-Driven Polymorphic Malware Unleashes Havoc on Cloud Supply Chains

Analyzing AI-driven polymorphic malware's impact on cloud supply chains and advanced forensic strategies from the ISC Stormcast 2026.

Marcus Thorne General news

Beyond the Horizon: Deconstructing the CIS Benchmarks July 2026 Update for Advanced Cybersecurity Resilience

Unpack the CIS Benchmarks July 2026 update, focusing on cloud, IAM, supply chain, and OT security for enhanced resilience.

Marcus Thorne General news

A Week in Cyber: APT Escalations, Quantum Readiness, and Advanced DFIR (June 29 – July 5, 2026)

Explosive week in cybersecurity: APTs, supply chain compromises, quantum readiness discussions, and advanced digital forensics insights.

Marcus Thorne General news

AWS Continuum: Redefining Vulnerability Management with Frontier AI and Predictive Security

AWS's AI-powered Continuum platform revolutionizes vulnerability management, offering discovery, prioritization, validation, and remediation of code vulnerabilities.

Marcus Thorne General news

CIS Benchmarks June 2026: Fortifying Defenses in an Evolving Threat Landscape

Deep dive into the CIS Benchmarks June 2026 updates, enhancing cloud, zero-trust, and supply chain security for robust cyber defense.

Marcus Thorne General news

The Phantom Menace: Persistent OAuth Access from Vanished Marketplace Apps

Explores critical risk: OAuth apps retain access after publishers vanish, enabling data exfiltration and supply chain attacks.

Marcus Thorne General news

CIS Benchmarks May 2026: Fortifying Defenses Against Evolving Cyber Threats

Deep dive into CIS Benchmarks May 2026 updates, focusing on cloud, AI/ML, IoT, and supply chain security for robust cyber defense.

Marcus Thorne General news

CIS Benchmarks April 2026 Update: Next-Gen Hardening for a Hyper-Connected World

April 2026 CIS Benchmarks update: advanced cloud, OT, endpoint hardening, supply chain, and IAM for robust cybersecurity.

Marcus Thorne General news

TeamPCP Update 005: First Victim Unmasked, Cloud Exploitation Exposed, Attribution Tightens

TeamPCP Update 005 reveals first confirmed victim, detailed cloud enumeration tactics, and narrowed threat actor attribution by Axios.

Marcus Thorne General news

A Week in the Digital Trenches: March 23 – March 29, 2026 – Navigating Advanced Persistent Threats and Evolving Cyber Warfare

Deep dive into March 23-29, 2026 security events: APTs, ChronosLocker ransomware, cloud breaches, and advanced forensics.

Marcus Thorne General news

CanisterWorm Unleashed: Deep Dive into the Wiper Attack Targeting Iran's Cloud Infrastructure

Analysis of CanisterWorm, a financially motivated wiper targeting Iran's cloud services, leveraging time zone and language as triggers.

Marcus Thorne General news

Rapid7's Exposure Command: Revolutionizing Cloud Risk with Runtime Validation and DSPM

Rapid7's Exposure Command now validates and prioritizes exploitable cloud risks via runtime analysis and DSPM, enhancing proactive security.

Marcus Thorne General news

Week in Review: AiTM Phishing Hijacks AWS, Year-Long HR Malware Campaigns Exposed

Deep dive into AiTM phishing bypassing MFA for AWS accounts and persistent malware targeting HR, including defense strategies.

Marcus Thorne General news

CIS Benchmarks March 2026: Navigating the Evolving Cyber Threat Landscape with Advanced Baselines

Deep dive into the CIS Benchmarks March 2026 updates, focusing on cloud, AI/ML, IoT, and advanced threat defense.

Marcus Thorne General news

VMware Aria Operations Zero-Day: Cloud Infrastructure at Critical Risk from Command Injection Exploitation

Command injection in VMware Aria Operations grants broad cloud access. Immediate patching and robust security measures are crucial.

Marcus Thorne General news

AWS Security Hub Extended: Unifying Enterprise Security Posture Across the Digital Fabric

AWS Security Hub Extended consolidates full-stack enterprise security across endpoint, identity, network, cloud, and AI, simplifying management and enhancing threat response.

Marcus Thorne General news

ISC Stormcast #9810: Navigating the 2026 Threat Landscape – A Deep Dive into API Gateway Exploits & Advanced OSINT

Analysis of ISC Stormcast #9810 (Feb 16, 2026) covering API gateway exploits, cloud threats, and advanced OSINT for threat attribution.

Marcus Thorne General news

CIS Benchmarks February 2026: Navigating the Evolving Cyber Threat Landscape

Deep dive into CIS Benchmarks February 2026 updates, focusing on cloud security, containerization, AI/ML, and advanced threat intelligence.

Marcus Thorne General news

Mandiant Uncovers ShinyHunters' Sophisticated SSO & MFA Phishing Campaign: A Deep Dive into Cloud Data Theft

Mandiant details how ShinyHunters abuses SSO and MFA via vishing and phishing to steal cloud data.

Marcus Thorne General news

The Unseen Frontier: 175,000 Ollama AI Servers Exposed Globally, Posing Significant Cybersecurity Risks

175,000 Ollama AI servers found exposed across 130 countries, creating a vast unmanaged compute layer with critical security implications.

Marcus Thorne General news

The Paradox of Pedagogy: How 'Damn Vulnerable' Training Apps Expose Security Vendors' Cloud Crowns

Over-permissioned 'Damn Vulnerable' training applications are being exploited, granting hackers access to major security vendors' critical cloud infrastructure.