Category: Infosecurity

Orca Security recently published their 2022 Cloud Security Alert Fatigue Report with some very surprising results. What is alert fatigue?

Alert fatigue is a major problem in the cloud security industry with security practitioners receiving hundreds of unprioritized alerts every day. Understanding which alerts need to be remediated and in what order, is an extremely important, yet tedious and time-consuming task.

It was interesting to read that 55% of respondents use three or more cloud providers and that 57% have five or more cloud security tools. These tools are likely siloed and do not talk to each other contributing to the problem.

It’s easy to see how all these products can overwhelm a team with false positives if misconfigured.

If you are running VMware Carbon Black, there are several critical security updates. They all have a CVSSv3 rating of 9.1. These updates fix the following issues (1) OS command injection vulnerability in VMware Carbon Black App Control (CVE-2022-22951) and (2) File upload vulnerability in VMware Carbon Black App Control (CVE-2022-22952).

Multiple vulnerabilities in VMware Carbon Black App Control were privately reported to VMware. Updates are available to remediate these vulnerabilities in affected VMware products.

Update your system as soon as you can.

You’ve likely heard of Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks, but did you know there is also another ..oS attack threat called Economic Denial of Sustainability (EDoS). This is where attackers take advantage of auto-scaling features with cloud providers and can cause your cloud bill to spike.

Attackers primarily target infrastructure as a service (IaaS) solutions. EDoS attacks use a common pattern of DDoS attack methods: exploiting cloud system vulnerabilities, such as old software versions, unsafe protocols, and publicly exposed IP addresses to install malicious software. They take over devices or cloud resources, which follow the attacker’s instructions and send fake traffic packets to a target system or service. This additional traffic causes the cloud service to scale up until it becomes economically unsustainable.

I haven’t seen many tools to defend against this attack, if you know of any let me know of Twitter or add a comment below.

Michael Royal put together this great open source security guide on GitHub. Lots of useful links and learning material.

A guide covering Security including the applications, libraries and tools that will make you better and more efficient at securing your system operations and newtorks.

The folks at Synk are expanding their free offering for qualified open source project maintainers. In addition, these projects will also get access to license compliance tools, project reporting, and other advanced features that used to only be in our paid tier. Check out the project qualification criteria and submit your open source project to the program.