#fedramp--self-managed
#fedramp--self-managed
[ follow ]
#cybersecurity #data-breach #cloud-security #data-protection #compliance #security #ai #ai-security #vulnerabilities
Science
fromSilicon Canals
8 hours agoSpaceX, Amazon, and Google want orbital data centers - four engineering barriers reveal who really benefits - Silicon Canals
Orbital data centers will concentrate AI infrastructure power among a few dominant companies, limiting access for smaller competitors and national regulators.
#data-breach
Privacy professionals
fromSilicon Canals
1 day agoA fintech app asked users for their passports - then left 360,000 files unprotected for five years - Silicon Canals
A money transfer app exposed over 360,000 sensitive files on a public server for nearly five years, including unencrypted personal documents.
Privacy technologies
fromTechCrunch
2 days agoExclusive: Money transfer app Duc exposed thousands of driver's licenses and passports to the open web
A publicly accessible Amazon storage server exposed personal data of hundreds of thousands, including driver's licenses and passports, without encryption.
fromNextgov.com
3 days agoHHS reverses Biden-era restructuring of its IT and tech operations
HHS Chief Information Officer Clark Minor stated that consolidating the CTO, CDO, and CAIO roles within his office allows the department to move faster on shared platforms and protect systems more effectively.
Healthcare
fromComputerworld
21 hours agoA core infrastructure engineer pleads guilty to federal charges in insider attack
Rhyne's attack involved unauthorized remote desktop sessions, deletion of network administrator accounts, and changing of passwords, showcasing significant security vulnerabilities.
Information security
Privacy professionals
fromSilicon Canals
1 day agoA money-transfer app stored customer passports on an unencrypted, publicly accessible server for nearly five years - Silicon Canals
Fintech companies face regulatory pressure to collect identity documents but lack enforceable obligations to protect them, leading to data breaches.
fromComputerWeekly.com
1 month agoWeighing up the enterprise risks of neocloud providers | Computer Weekly
Neocloud providers, which include the likes of Nscale, CoreWeave and Carbon3.ai, are having a somewhat disruptive impact on the market by making huge commitments to build out hyperscale datacentres in support of the UK government's AI growth agenda. These providers are also taking up capacity in colocation datacentres that some of the hyperscale cloud giants previously committed to renting space in, before pulling out.
Miscellaneous
Privacy professionals
fromArs Technica
2 weeks agoFederal cyber experts called Microsoft's cloud a "pile of shit," approved it anyway
Microsoft's Government Community Cloud High received federal cybersecurity approval despite documented security concerns and inadequate documentation, following years of failed security assessments.
fromTechzine Global
4 days agoIGEL introduces reference architectures for secure cloud desktops
"For healthcare, government, and contact center environments, reducing risk at the endpoint is essential. By aligning IGEL's immutable endpoint OS and Adaptive Secure Desktop™ with Windows 365 and Microsoft Azure Virtual Desktop, these reference architectures give organizations clear guidance for delivering secured and resilient digital workspaces."
DevOps
Information security
fromSecuritymagazine
3 days agoThe Rising Tide of Executive Protection: Corporations Ramp Up Security in an Era of Heightened Threats
Companies are increasingly investing in executive protection due to rising threats, making it a strategic necessity for business continuity and resilience.
Information security
fromComputerWeekly.com
2 weeks agoBeyond integration theatre: Building stronger cyber platforms | Computer Weekly
Integration layers between security platforms, not the platforms themselves, have become the primary enterprise security risk requiring rigorous governance of delegated trust.
Information security
fromThe Hacker News
2 weeks agoWhy Security Validation Is Becoming Agentic
Security validation tools operate in silos while attackers exploit interconnected systems, creating a structural blind spot that Agentic Exposure Validation can address through continuous, autonomous, context-aware assessment.
[ Load more ]