Wiz to Pursue IPO as It Walks Away From $23 Billion Google Deal

July 23, 2024 at 03:51AM Israeli cloud security company Wiz rejects a $23 billion offer from Alphabet, choosing to pursue an IPO as originally planned. Antitrust and investor concerns led to the deal’s collapse. Backed by venture capital firms, Wiz aims for an annual recurring revenue of $1 billion and focuses on its cloud security … Read more

EC-Council Democratizes Hands-On Cybersecurity Training With 8 Cyber Courses

July 22, 2024 at 04:52PM EC-Council, a renowned cybersecurity company, launched the Cyber Essentials Series comprising eight affordable courses to address the widening global cyber skills gap. These courses aim to provide foundational cybersecurity training in key domains and support individuals seeking to enhance their cybersecurity expertise or pursue a career in this field. The … Read more

Cloud Security Alliance Introduces Certificate of Cloud Security Knowledge

July 22, 2024 at 04:37PM The Cloud Security Alliance (CSA) has released the Certificate of Cloud Security Knowledge (CCSK) v5 and the Security Guidance for Critical Areas of Focus in Cloud Computing v5. This updated program covers modern cloud components, state-of-the-art security best practices, and emerging technologies like GenAI safety and Zero Trust approach to … Read more

PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing

July 22, 2024 at 08:55AM FLUXROOT, a financially motivated threat actor, abused Google Cloud serverless projects to conduct phishing attacks, targeting Latin America. This highlights the trend of threat actors exploiting cloud computing for malicious purposes. Google has taken measures to mitigate such activities, emphasizing the challenges in detecting and countering threats facilitated by cloud … Read more

Application Security Startup Heeler Raises $8.5 Million in Seed Funding

July 22, 2024 at 08:02AM Heeler Security, a US-based application security startup founded in 2023, has secured $8.5 million in seed funding led by Norwest Venture Partners. The company focuses on enhancing application security and efficiency with its ProductDNA technology, providing real-time code assessment and automation. Currently used by Fortune 500 companies, the technology will … Read more

CSA Updates Cloud Security Certificate, Training

July 19, 2024 at 08:28AM The Cloud Security Alliance released CCSK v5, a comprehensive cloud security training and certificate for security professionals. It covers topics like incident response, data encryption, and application security. The program complements other education and provides in-depth information on cloud architecture, workloads, AI, and more. The exam is 120 minutes long … Read more

Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns

July 18, 2024 at 03:03PM SecurityWeek Network offers cybersecurity news, webcasts, virtual events, and covers a wide range of topics including malware, cyberwarfare, data breaches, ransomware, and more. It also features specific tracks on ICS cybersecurity, industrial cybersecurity, and information on cybersecurity funding and M&A activity. Based on the meeting notes, it seems like the … Read more

SAP AI Core Vulnerabilities Allowed Service Takeover, Customer Data Access

July 18, 2024 at 11:03AM SAP’s AI Core service was recently vulnerable to attacks, potentially allowing access to customer data, as reported by Wiz. The flaws were discovered and reported to SAP by Wiz, which led to the release of patches for the bugs in May. The vulnerabilities could have allowed attackers to execute code … Read more

SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks

July 18, 2024 at 06:27AM Cybersecurity researchers discovered five vulnerabilities in SAP AI Core platform, making unauthorized access and data theft possible. With responsible disclosure, SAP addressed the weaknesses, preventing potential misuse. The findings coincide with increased enterprise use of generative AI and the emergence of a new cybercriminal threat group, NullBulge, targeting AI and … Read more

Virtual Event Today: Cloud & Data Security Summit | 2024

July 17, 2024 at 07:06AM The 2024 Cloud & Data Security Summit begins today at 11AM ET in SecurityWeek’s virtual conference center. It will cover SaaS security trends, cyberattacks against cloud infrastructure, vendor patch management, data security posture management, and AI and LLM technologies. Sessions include discussions with industry experts and access to technical resources. … Read more