Syeda Sara Fathima’s Post

Google Gemini now allows users to double-check AI-generated information using Google search https://bit.ly/3WlkhTX #cloud #security

Read “We’re All in this Together: A Year in Review of Zero-Days Exploited In-the-Wild in 2023,” a report from Google’s Threat Analysis Group (TAG) and Mandiant (now part of Google Cloud) that looks at the zero-days actively exploited in-the-wild in 2023 and offers recommendations for securing the ecosystem → https://goo.gle/4bjkprJ

The first step towards protecting sensitive data begins with knowing where it exists. Sensitive Data Protection can automatically discover sensitive data assets and attach tags based on sensitivity levels. And, using IAM conditions, you can grant or deny access to data based on the presence of a sensitivity level. Learn how this safer-by-default combination works ➡️ https://goo.gle/3zqFXW7 #GoogleCloud #Google #Alphabet #Cloud

Two interesting Netskope Threat Labs reports: Top Adversary Tactics and Techniques in 2023: https://lnkd.in/d233WB7U Cloud and Threat Report 2024: https://lnkd.in/duBtrzsX

This latest Threat Briefing introduces a new detection, a preconfigured device query, and a preconfigured records query. RevealX now detects #AnyDesk cloud service connections that occurred for the first time in several weeks. 

It is important to prioritize security when utilizing Screen Flows in your Experience Cloud site to prevent unintentional exposure of fields and data, especially when providing external user access. Learn more in our latest post by Adam White.

#ALERT Critical #vulnerability found in #FluentBit: What you need to know!! 🚨 The Tenable research team has discovered a significant vulnerability in Fluent Bit, a key #observability agent used widely across cloud providers, particularly in #Google #Kubernetes Engine (#GKE) clusters. Why is it important to address this? This vulnerability could affect tech giants and cloud providers, exposing data that should be secured. 🚀 For a deep dive into this vulnerability and how to safeguard your systems, read the full blog post by Dynatracer Henrik Rexed here: #fluentbit #security #vulnerability #opensource #cncf

Friendly cloud attack surface reminder: If you are using Google or Microsoft as your identity provider - manage your third party OAuth consent and permissions. Typically the default settings are incredibly overly permissive for a user-based decision without some level of guardrails. If someone's unsure, they could always follow the links below to help them spot check. Google - https://lnkd.in/es9AaBPN https://lnkd.in/eMHJVBVV Microsoft - https://lnkd.in/enihc-eE

We're building security at scale. 📈 Listen in as CyberProof CEO Tony Velleca talks all things innovation and integration with the Google Cloud Security team. Learn more about how CyberProof and Google SecOps partner for growth with adaptive MxDR here: https://hubs.ly/Q02P2x2t0 #CyberProof #GoogleCloud #GoogleSecOps #Chronicle #BetterSecurityTogether

Attackers are exploiting #SSO to gain access to your #cloud data. With Lookout, you’re protected at every stage of the modern kill chain. See it in action: https://bit.ly/3KiKjRf