Tips

How Microsoft uses secure enclaves to improve cloud security

The use of secure enclaves in the Microsoft Azure confidential computing update aims to improve cloud storage security. Expert Rob Shapland explains how it works. Continue Reading
Ransomware in the cloud: How to handle the threat

Expert Ed Moyle looks at ransomware in the cloud and how it differs from traditional ransomware attacks. Find out how your organization can prepare for both. Continue Reading
Is cloud microsegmentation secure enough for enterprise use?

The use of cloud microsegmentation in enterprises has been met with some hesitation. Expert Dave Shackleford discusses why there are reservations and what the benefits are. Continue Reading
How to use the NIST Cybersecurity Framework for the cloud

Aligning the NIST Cybersecurity Framework with cloud services like AWS and Azure can improve cloud security. Expert Ed Moyle explains how to best use the framework for the cloud. Continue Reading
How a cloud-based Kali Linux system helps with pen testing

Enterprises can use a Kali Linux system in the cloud for penetration testing. Expert Frank Siemons explains how it works and some alternative methods for testing. Continue Reading

Why web application attacks are a growing threat to the cloud

New research found that web application attacks present a significant threat to cloud environments. Rob Shapland explains the risks and what enterprises should do about them. Continue Reading
Understanding VM escape vulnerabilities and how to avoid them

In the last couple of years, VM escape vulnerabilities have popped up and caused problems for enterprises that rely on the cloud. Expert Ed Moyle explains how to handle these issues. Continue Reading
How Docker APIs can be misused to plant malware

Researchers discovered how Docker APIs can be exploited to hide malware. Dave Shackleford explains the attack method and the threat it poses to container and virtual machines. Continue Reading
Why cloud reconnaissance is crucial to a secure cloud environment

Knowledge is power, which is why cloud reconnaissance and enumeration are key when it comes to securing the cloud. Expert Frank Siemons explains why and how to do it. Continue Reading
Ransomware defense isn't necessarily stronger in the cloud

Storing data in the cloud isn't a sure-fire ransomware defense method. Expert Rob Shapland examines how the cloud helps and hurts when it comes to ransomware attacks. Continue Reading
The security risks of HTTPS inspection in the cloud

Cloud service providers can perform HTTPS inspection, despite warnings from US-CERT. Expert Ed Moyle looks at what this technique does and what the security implications are. Continue Reading

How to manage control inheritance in a hybrid cloud environment

Effective management of access control inheritance is important in a hybrid cloud environment. Expert Ravila White explains the challenges involved and how to overcome them. Continue Reading
How attackers can intercept iCloud Keychain data

A verification flaw in the synchronization service of iCloud Keychain enables attackers to intercept the data it transfers. Expert Frank Siemons explains what to do about it. Continue Reading
How Microsoft SRD uses AI to help developers with security

Microsoft SRD is a new cloud service that aims to detect vulnerabilities in software using artificial intelligence. Expert Dave Shackleford explains what that means. Continue Reading
Face the challenges of secure cloud access control

Don't store identity and access data in the cloud without first taking secure cloud access control seriously. Expert Rob Shapland explains the security considerations for enterprises. Continue Reading