RSS_Virtulization

Microsoft has fixed a critical flaw in Cosmos DB that allowed any Azure user to remotely take over other users’ databases without any authorization. Researchers from Cloud security company Wiz disclosed technical details of a now-fixed Azure Cosmos database vulnerability, dubbed ChaosDB, that could have been potentially exploited by attackers to gain full admin access to other customers’ database instances without any authorization. The flaw was trivial to exploit and impacts thousands of organizations worldwide….

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert urging enterprises to address the recently disclosed vulnerability in Microsoft Azure Cosmos DB. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert urging organizations to address the recently disclosed vulnerability in Microsoft Azure Cosmos DB (aka ChaosDB) as soon as possible. Last week, researchers from Cloud security company Wiz disclosed technical details of a now-fixed Azure Cosmos database vulnerability, dubbed ChaosDB, that could…

The UK Cyber Security Council has appointed Simon Hepburn as its permanent chief executive. Hepburn will succeed Don MacIntyre, who was appointed interim CEO of the Council in January 2021, shortly before it launched as an independent organization. He is tasked with driving forward the remit of the self-regulatory body for the cybersecurity education and skills sector, whose activities are funded by the UK government. This is primarily to represent the cybersecurity profession, drive awareness and excellence across the…

More than nine in 10 (91%) industrial organizations are vulnerable to cyber-attacks, according to a new report by Positive Technologies. The study found that external attackers can penetrate the corporate network in all these organizations, and once inside, can obtain user credentials and complete control over the infrastructure in 100% of cases. In over two-thirds (69%) of these cases, external attackers can steal sensitive data from the organization, including information about partners and company employees and internal…

Cyber security is becoming an expensive endeavour for organisations – and in many cases, the costs are so high that they can’t deal with threats appropriately. In fact, a Kaspersky report has found that only half of organisations have a dedicated IT security team, and only one in five has the tools to monitor and respond to cyber security incidents. This is despite increased data protection requirements, with the introduction of the likes of the…