Cloud Archives

A conceptual image representing misconfigurations, such as the excessive permissions that IAM-Deescalate helps detect and remediate

22,859

people reacted

IAM-Deescalate: An Open Source Tool to Help Users Reduce the Risk of Privilege Escalation

By Jay Chen
July 25, 2022 at 6:00 AM

6 min. read

A conceptual image representing container security, including FabricScape, the container escape vulnerability discussed here.

48,668

people reacted

FabricScape: Escaping Service Fabric and Taking Over the Cluster

By Aviv Sasson
June 28, 2022 at 4:30 PM

10 min. read

A conceptual image representing cloud service providers. So far, ransomware in public clouds is rare, partly due to the attention cloud service providers pay to securing their infrastructure.

31,281

people reacted

A Look Into Public Clouds From the Ransomware Actor's Perspective

By Jay Chen
May 16, 2022 at 6:00 AM

14 min. read

A conceptual image representing a vulnerability in the AWS Log4Shell hot patch. It shows a java symbol inside a container with one door open.

59,918

people reacted

AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation

By Yuval Avrahami
April 19, 2022 at 3:00 PM

7 min. read

A conceptual image representing containers, including the K8s clusters discussed here.

26,975

people reacted

Gaining Visibility Within Container Clusters

By Nathaniel Quist
April 15, 2022 at 6:00 AM

10 min. read

A conceptual image representing defense against cloud threats

40,105

people reacted

IAM Your Defense Against Cloud Threats: The Latest Unit 42 Cloud Threat Research

By Unit 42
April 12, 2022 at 3:00 AM

5 min. read

2022 Unit 42 Ransomware Threat Report cover art

33,073

people reacted

2022 Unit 42 Ransomware Threat Report Highlights: Ransomware Remains a Headliner

By Unit 42
March 24, 2022 at 3:00 AM

5 min. read

A conceptual image representing Kubernetes security, including the GKE Autopilot vulnerabilities discussed here, which, before fixed, could have allowed for container escape leading to a shadow administrator.

36,767

people reacted

Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities

By Yuval Avrahami
March 8, 2022 at 6:00 AM

14 min. read

A conceptual image representing container security issues, such as CVE-2022-0492, the Linux vulnerability discussed here.

70,054

people reacted

New Linux Vulnerability CVE-2022-0492 Affecting Cgroups: Can Containers Escape?

By Yuval Avrahami
March 3, 2022 at 10:00 AM

9 min. read

A conceptual image representing misconfigurations in the cloud, including insecurely exposed services.

52,574

people reacted

Observing Attacks Against Hundreds of Exposed Services in Public Clouds

By Jay Chen
November 22, 2021 at 12:00 PM

7 min. read

A conceptual image representing threats in the cloud, such as TeamTNT, which is expanding its cryptojacking footprint with new TTPs.

71,644

people reacted

Updated: New Evidence Emerges to Suggest WatchDog Was Behind Crypto Campaign

By Nathaniel Quist
October 29, 2021 at 4:10 PM

9 min. read

A conceptual image representing network scanning, such as the network scanning traffic researchers observed in public clouds.

41,540

people reacted

Network Scanning Traffic Observed in Public Clouds

By Jay Chen
October 28, 2021 at 6:00 AM

6 min. read

A conceptual image representing cloud security, associated with the Unit 42 Cloud Threat Report, 2H 2021.

43,460

people reacted

Highlights From the Unit 42 Cloud Threat Report, 2H 2021

By Unit 42
September 28, 2021 at 3:00 AM

3 min. read

A conceptual image associated with the threat brief series, such as this post covering recent OMI vulnerabilities and how to remediate.

40,169

people reacted

Threat Brief: OMI Vulnerabilities (CVE-2021-38645, CVE-2021-38647, CVE-2021-38648 and CVE-2021-38649)

By Nathaniel Quist
September 16, 2021 at 12:00 PM

2 min. read

A conceptual image illustrating vulnerabilities related to containers and Kubernetes, such as Azurescape, the cross-account container takeover in Azure Container Instances discussed here.

85,789

people reacted

Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances

By Yuval Avrahami
September 9, 2021 at 3:00 AM

14 min. read

Category: Cloud

IAM-Deescalate: An Open Source Tool to Help Users Reduce the Risk of Privilege Escalation

FabricScape: Escaping Service Fabric and Taking Over the Cluster

A Look Into Public Clouds From the Ransomware Actor's Perspective

AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation

Gaining Visibility Within Container Clusters

IAM Your Defense Against Cloud Threats: The Latest Unit 42 Cloud Threat Research

2022 Unit 42 Ransomware Threat Report Highlights: Ransomware Remains a Headliner

Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities

New Linux Vulnerability CVE-2022-0492 Affecting Cgroups: Can Containers Escape?

Observing Attacks Against Hundreds of Exposed Services in Public Clouds

Updated: New Evidence Emerges to Suggest WatchDog Was Behind Crypto Campaign

Network Scanning Traffic Observed in Public Clouds

Highlights From the Unit 42 Cloud Threat Report, 2H 2021

Threat Brief: OMI Vulnerabilities (CVE-2021-38645, CVE-2021-38647, CVE-2021-38648 and CVE-2021-38649)

Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances

Popular Resources

Legal Notices

Account

Trending

Popular Resources

Legal Notices

Account