[Some Interesting] Cloud ‘n Sec news: 17th Jun 22
What’s worth your reading time
Big funding for Cloud software and Platforms Cost Monitoring maker
Cost monitoring app for cloud software and platforms, named Finout, is getting a 18.5 million dollar funding. This is a sign of interest and potential in this segment, watch this out.
Cost Monitoring is top of mind of organizations migrating their workloads to the cloud. According to some reports companies waste more than 30% of their cloud budget owing to underestimates of usage.
The company’s founder, stated that Finout was founded to:
bring transparency not only to cloud environment pricing, but to the cost of cloud-native software that organizations use every day.
Read more about it here.
MIT management School point out how Cloud adoption is linked to stronger performance
This is a great write up on a research from an MIT representative. Have a look at the article, it states:
Firms that transition to the cloud improve productivity, increase revenue, and are better positioned to embrace new technology, according to an MIT researcher.
Google adding privacy to Distributed cloud edge server
This is a new iteration of their Distributed Cloud Edge. According to SDX central:
aimed at private network deployments that require specific performance and service-level agreement (SLA) standards.
The new version brings in vendor partners that can provide enterprise-specific services running on top of the Google Distributed Cloud (GDC) Edge system. These services include the ability to tap into licensed spectrum assets either controlled by a carrier or available through outside licensing models; support for virtualized radio access network (vRAN) technology for connectivity and edge applications; and deployment and management of control and user plane functions.
Google Cloud expanding in Italy
Google Cloud announced this week its expansion into Italy with a new region in Milan, and offered news of another to come in the city of Turin. Google Cloud is working with local telco partner Telecom Italia (TIM) to expand its global hyperscale infrastructure in Italy. With Milan now active, Google counts 34 global regions and 103 zones, covering users in more than 200 countries and territories globally.
Microsoft announces acquisition of cybersecurity company
Microsoft is acquiring a Threat Intelligence company, called Miburo, according to the announcement:
cyber threat analysis and research company specializing in the detection of and response to foreign information operations.
Interpol seizes 50 million dollars and heaps of social engineers
An international law enforcement operation, codenamed ‘First Light 2022,’ has seized 50 million dollars and arrested thousands of people involved in social engineering scams worldwide.
The operation was led by Interpol with the assistance of police in 76 countries and focused on social engineering crimes involving telephone deception, romance scams, business email compromise (BEC) scams, and related money laundering.
Microsoft released in the june security updates a patch to the zero day called “Follina” by the security community. The patch covers all Windows versions still receiving security updates (i.e., Windows 7+ and Server 2008+).
The vulnerability is a Remote code execution targeting Microsoft Windows Support Diagnostic Tool (MSDT).
As security researcher nao_sec found, Follina exploits allow threat actors to execute malicious PowerShell commands via MSDT in what Redmond describes as Arbitrary Code Execution (ACE) attacks when opening or previewing Word documents.
While applying today’s updates does not prevent Microsoft Office from automatically loading Windows protocol URI handlers without user interaction, it blocks PowerShell injection and disables this attack vector.
Learn more about my Cloud and Security Projects: https://linktr.ee/acamillo
Thank you for reading and leave your thoughts/comments!