Topic: cloud misconfiguration
-
Cloud IAM weaknesses put 98% of environments at risk
Misconfiguration remains a top cloud security risk, and CISA has now made baseline cloud configuration a formal requirement for federal agencies and their contractors. 98% of cloud environments face identity and access management (IAM) weaknesses, driven by excessive permissions, stale accounts, ...
Read More » -
Duc Money Transfer App Exposed Driver's Licenses and Passports
A misconfigured Amazon cloud server at Canadian fintech firm Duales publicly exposed over 360,000 sensitive customer documents, including passports, driver's licenses, and transaction records, from its Duc App money-transfer service. The company secured the server after being alerted, but the CEO...
Read More » -
Hotel glitch exposed 1M passports and driver's licenses
A security lapse in the hotel check-in system Tabiq, developed by Japan-based Reqrea, exposed over one million passports, driver’s licenses, and selfie photos online due to a publicly accessible Amazon cloud storage bucket named "tabiq." The data was taken offline after TechCrunch notified Reqrea...
Read More » -
VMware Certification Demand Soars Amid IT Evolution
VMware certification has become essential for IT professionals due to the rise of hybrid infrastructure, multi-cloud management, and security demands, moving from an optional to a critical qualification. Certified employees add significant financial value, with 22% of companies estimating at leas...
Read More » -
ScreenConnect Servers Attacked, SharePoint Flaw Exploited
Two critical software vulnerabilities are being actively exploited: a Microsoft SharePoint flaw (CVE-2026-20963) and a severe session hijacking issue in the ScreenConnect remote access platform (CVE-2026-3564), requiring immediate patching. The threat landscape is expanding with sophisticated mob...
Read More » -
AI Slashes Attacker Breakout Time to 4 Minutes
AI is dramatically accelerating cyberattacks, with threat actors using automation to reduce the average breakout time to just 34 minutes, enabling lateral movement in as little as four minutes. Attackers are using AI to enhance reconnaissance and social engineering, while defenders struggle due t...
Read More »