Strata Identity’s Maverics Identity Discovery aims to automate the process of auditing and cataloging of legacy identity systems. (Photo by Sean Gallup/Getty Images) Strata Identity on Wednesday launched Maverics Identity Discovery, a free software tool that automates the manual process of auditing and cataloging on-premises identity environments. In a press release, Strata claims that the tool reduces cloud migration project times from months to hours. The release of the Maverics cloud migration tool looks to solve a very specific problem for security teams: According to recent Strata researc ..read more

The Amazon Web Services (AWS) office in Houston, Texas. (Tony Webster from Minneapolis, Minnesota, United States, CC BY 2.0 https://creativecommons.org/licenses/by/2.0, via Wikimedia Commons) Amazon Web Services this week launched a new free online training series on Twitch that aims to build up the skills of cloud developers. The new series, the AWS Power Hour: Architecting, kicked off on Monday, July 12 and will run for six weeks. According to an AWS blog, the developer training is part of AWS’s commitment to offer free skills training to 29 million learners globally by 2025 throug ..read more

Building 92 at Microsoft Corporation in Washington state. (Coolcaesar, CC BY-SA 4.0 https://creativecommons.org/licenses/by-sa/4.0, via Wikimedia Commons) Looking to strengthen its position in cloud security, Microsoft on Monday announced a definitive agreement to acquire RiskIQ, a cloud-based threat intelligence and attack surface management vendor best known for its PassiveTotal product. In a blog post, Eric Doerr, vice president of Microsoft Cloud Security, said companies need better visibility into their assets and exposure to the internet, regardless if they run in multi-cloud or hybrid c ..read more

Researchers on Thursday disclosed that over the past year they found and later fixed a broken object level authorization (BOLA) vulnerability and many other API issues on the platform used by online course provider Coursera. (“Werbach-Student-Flatscreen3” by Vanessa Blaylock is licensed under CC BY 2.0) Researchers on Thursday disclosed that over the past year they found and later fixed a broken object level authorization (BOLA) vulnerability and many other API issues on the platform used by online course provider Coursera. The BOLA vulnerability could have been a ..read more

A visitor photographs a symbol of a cloud at the Deutsche Telekom stand the day before the CeBIT technology trade fair. Kaseya began the technical work for deployment of the company’s servers that support the software-as-a-service VSA product, after the SaaS servers were taken offline as a precautionary measure following a ransomware attack against on-prem installations.(Sean Gallup/Getty Images) Kaseya began the technical work for deployment of the company’s servers that support the software-as-a-service VSA product, configuring an additional layer of security to the SaaS infrastructure. The ..read more

Mark Begor,(L), CEO of Equifax appears before the Senate Homeland Security and Governmental Affairs Subcommittee on Capitol Hill, March 7, 2019 to testify about the company’s data breach. Lack of a mature inventory of its IT assets was a contributing factor. (Photo by Mark Wilson/Getty Images) Sevco Security announced $15 million in Series A funding on Wednesday contributing to a vision from the founders to transform an emerging product category much in the same way they did endpoint detection and response (EDR) with Carbon Black in 2002. J.J. Guy, Sevco co-founder and CEO and a Carbon Black f ..read more

An Apple store in London. Apple had become Google’s largest customer of cloud data services. (Jon Rawlinson/CC BY 2.0) Reports Tuesday that Apple had become Google’s largest customer of cloud data services – and that the iCloud data was encrypted by Apple – was viewed as a positive development by some security researchers, who said more companies need to take the shared responsibility model with cloud service providers (CSPs) seriously. The report said Apple was on track to spend about $300 million on Google cloud storage services in 2021 – a 50% increase year-over-year. And because the data g ..read more

An employee checks a vehicle at a Mercedes-Benz car dealership. (Photo by Dmitry RogulinTASS via Getty Images) Mercedes-Benz disclosed late last week that sensitive personal information of less than 1,000 Mercedes-Benz customers and interested buyers was made accessible on a cloud storage platform – an issue experts say security teams can prevent by working more closely with third-party providers to lock down cloud databases. The Mercedes-Benz leak highlights an issue that security teams keep seeing time and again: Private data that’s accidentally left publicly accessible on a cloud storage pl ..read more

Symmetry Systems CEO Mohit Tiwari and members of his team. (Symmetry Systems) Symmetry Systems on Wednesday announced $15 million in Series A funding that it will use to double its staff from 15 to 30 and add personnel in development, marketing, sales, and engineering. Mohit Tiwari, the company’s co-founder and CEO, said all of these new employees will focus on the company’s core mission of delivering data visibility to customers. After a breach, top management doesn’t ask which application got hacked, Tiwari said. Instead, they want to know if any sensitive data was lost and what it might cos ..read more

Visitors walk by a cloud sign at the Telekom stand at the CeBIT 2017 Technology Trade Fair on March 21, 2017. New research found that half of CISOs surveyed say their organization’s desire for growth and rapid digital transformation has become detrimental to achieving data security in the cloud. (Photo by Alexander Koerner/Getty Images) Half of CISOs surveyed say their organization’s desire for growth and rapid digital transformation has become detrimental to achieving data security in the cloud, according to new research by Netwrix. The new report found that the top challenges CISOs have to s ..read more