Over 1.5m personal photos from dating apps leak online

In what can be described as a significant security breach, over 1.5 million personal photographs have been exposed and are now accessible online, all due to a human error that led to the leak of sensitive information. This incident has raised serious concerns, especially considering the nature of the data that was compromised.

Among the leaked images, many are linked to individuals from niche and marginalized communities, including those involved in BDSM and the LGBT community. This exacerbates the situation, as the nature of the leaked photos includes intimate verification images, photos that had been previously rejected by site moderators, as well as private pictures that were shared and circulated among users. The compromised nature of this data makes the breach particularly worrying, as the affected individuals might face severe personal and social consequences.

The breach was traced back to a cloud platform operated by MAD Mobile, a technology service provider for several niche websites, including Translove, Chica, Brish, and Pink. The cause of the leak remains unclear: it is still uncertain whether cybercriminals managed to infiltrate the cloud database directly, or if the security measures implemented by MAD Mobile were insufficient, allowing the breach to occur in the first place.

A detailed investigation into the breach revealed that the hack was primarily enabled by a human mistake—specifically, a failure to patch a known vulnerability within the system. This oversight gave hackers a window of opportunity to exploit the flaw, ultimately leading to the unauthorized access and theft of sensitive data.

However, a spokesperson from MAD Mobile, based in Florida, responded to the incident by confirming that the vulnerability has now been addressed and that the cause was indeed human error. The representative also stressed that, to their knowledge, the exposed information had not been fraudulently accessed or misused online. While this may provide some relief, it does little to erase the damage caused by the breach, especially for the individuals whose private information was exposed.

This incident highlights the ongoing importance of cybersecurity and the need for stringent protocols to protect personal data. It also emphasizes the potentially harmful impact on vulnerable communities when their private lives are compromised in such a manner. The event has left many questioning the adequacy of the security measures in place at MAD Mobile and other similar service providers, as well as the broader responsibility of tech companies to safeguard user privacy.

The post Over 1.5m personal photos from dating apps leak online first appeared on Cybersecurity Insiders.

The post Over 1.5m personal photos from dating apps leak online appeared first on Cybersecurity Insiders.

April 01, 2025 at 10:44AM

Read More

Upgrading Email Security: Why Legacy Systems Struggle with Modern Threats and How to Fix Them

For years, businesses have relied on email as their primary communication tool, trusting legacy security systems to keep sensitive information safe. But cyber threats have changed. The simple spam filters and antivirus tools that once seemed sufficient now fail against modern phishing schemes, ransomware, and AI-driven fraud. Sticking to outdated security measures isn’t just risky—it’s an open invitation for attackers.

Yet, many companies hesitate to upgrade their email security. Concerns about cost, disruption, and complexity hold them back. But waiting for a breach to happen isn’t a strategy—it’s a liability. As Trinetix points out, modernization isn’t just about replacing old software; it’s about ensuring systems are adaptive, resilient, and built for the future. Organizations that fail to update their email security risk losing more than just data—they risk customer trust, financial stability, and compliance with evolving regulations.

Understanding the Modern Threat Landscape

Email-based attacks have evolved far beyond generic phishing attempts. Cybercriminals now deploy AI-driven scams, deepfake-powered impersonations, and sophisticated ransomware campaigns that exploit outdated security models. These threats are dynamic, constantly adapting to bypass traditional security measures.

Advanced Phishing Attacks and Social Engineering

Phishing has become hyper-personalized. Attackers scrape social media, breach databases, and use AI-generated text to craft emails that mimic real employees. Business Email Compromise (BEC) scams have led to billion-dollar losses by fooling finance teams into wiring money to fraudulent accounts. Legacy security filters, trained on outdated threat signatures, often fail to detect these highly customized attacks.

The Rise of Ransomware via Email

Ransomware attacks are no longer just random. Attackers use tailored email lures, hiding malware in documents that seem harmless. Some advanced ransomware strains even remain dormant for weeks, silently exfiltrating data before locking systems down. Without real-time behavioral analysis, legacy email security tools can’t detect these slow, stealthy attacks.

AI-Powered Threats and Deepfake Scams

Attackers aren’t just using AI for automation—they’re using it to manipulate reality. Deepfake voice and video scams allow cybercriminals to impersonate executives, instructing employees to transfer funds or share confidential information. These scams bypass traditional email security measures because they exploit human psychology rather than technical vulnerabilities.

The Key Weaknesses of Legacy Email Security Systems

Many organizations assume their existing security measures are “good enough.” But email security solutions built a decade ago simply aren’t equipped to handle today’s threat landscape. The limitations of these outdated systems create significant gaps that cybercriminals easily exploit.

Businesses relying on these outdated methods are playing defense with a rulebook that’s no longer relevant.

How to Upgrade Email Security for the Modern Threat Landscape

A modern email security strategy isn’t about adding another filter—it’s about creating a proactive, adaptive system that keeps up with evolving threats.

Implementing AI-Driven Threat Detection

Instead of relying on predefined rules, AI-driven solutions continuously learn from real-time email activity, spotting anomalies that indicate phishing, malware, or account compromise. This allows businesses to stop attacks before they reach employees.

Strengthening Email Authentication with DMARC, SPF, and DKIM

Email authentication protocols ensure that emails actually come from who they claim to be. By enforcing DMARC, SPF, and DKIM policies, organizations can prevent domain spoofing—one of the most common tactics in phishing attacks.

Adopting Zero Trust Security for Email Access

Zero Trust principles eliminate the assumption that any device or user is inherently safe. By requiring continuous verification and applying least-privilege access, companies can prevent attackers from gaining access—even if they steal login credentials.

Utilizing End-to-End Encryption and Secure Email Gateways

Encrypting emails ensures that even if intercepted, they remain unreadable to unauthorized parties. Secure Email Gateways (SEGs) add another layer of defense, scanning email traffic for malicious attachments, links, and behavioral anomalies.

Enhancing Incident Response and Security Awareness Training

Technology alone won’t solve email security problems. Employees remain the weakest link if they aren’t trained to recognize suspicious emails. Regular phishing simulations and clear reporting protocols help build a more security-aware workforce.

The Role of Software Development in Modern Email Security

While businesses often rely on third-party security tools, custom software development can create security solutions that align with unique operational needs.

Developing Custom Security Solutions for Enterprises

Pre-built email security solutions often struggle to integrate seamlessly with an organization’s existing infrastructure. Custom-built security tools can address specific vulnerabilities while ensuring compliance with industry regulations.

Leveraging Cloud-Native Email Security Solutions

Legacy on-premise security solutions lack the agility needed to respond to modern threats. Cloud-native security platforms offer real-time threat intelligence, automated security updates, and scalable protection across multiple devices and locations.

Future Trends: AI-Driven Security Automation and Blockchain for Email Integrity

AI-powered security automation allows businesses to detect and neutralize threats in real time—without human intervention. Meanwhile, blockchain technology could revolutionize email security by enabling verifiable sender identities and tamper-proof email records.

What Happens Next?

Outdated email security isn’t just a technical challenge—it’s a business risk. As attacks grow more sophisticated, companies that fail to modernize will find themselves playing catch-up in a game where losing means data breaches, financial losses, and reputational damage.

Upgrading email security isn’t about staying ahead of threats—it’s about ensuring they never reach you in the first place. Organizations that integrate AI-driven security, enforce strict authentication, and adopt Zero Trust principles will be the ones that stay secure in an increasingly hostile digital environment.

 

 

The post Upgrading Email Security: Why Legacy Systems Struggle with Modern Threats and How to Fix Them first appeared on Cybersecurity Insiders.

The post Upgrading Email Security: Why Legacy Systems Struggle with Modern Threats and How to Fix Them appeared first on Cybersecurity Insiders.

April 01, 2025 at 09:58AM

Read More

The Critical Role of Backup and Encryption in Ransomware Defenses

In today’s increasingly digital world, ransomware attacks have become one of the most pervasive threats to businesses and individuals alike. Ransomware is a type of malicious software that locks a victim’s files or entire system, demanding a ransom to restore access. With the rising frequency and sophistication of these attacks, it is crucial to adopt effective defensive strategies. Among the most vital components in ransomware defenses are backup and encryption, two practices that can significantly mitigate the damage caused by such cyber threats.

Why Backup is Essential in Ransomware Defense

One of the primary goals of a ransomware attack is to encrypt a victim’s data, rendering it inaccessible until the ransom is paid. However, relying solely on paying the ransom to regain access to critical files is both risky and unreliable. There’s no guarantee that cybercriminals will restore access after receiving the payment, and doing so only encourages further criminal activity.

Regular data backups can be a game-changer in such scenarios. By maintaining frequent backups of important files, applications, and system settings, organizations can restore their data to a previous, uninfected state without having to pay the ransom. This makes backup one of the most powerful tools in ransomware defense. Here’s how it helps:

 Quick Recovery: In the event of a ransomware attack, having an up-to-date backup enables rapid recovery of lost or encrypted data, minimizing downtime and reducing the operational impact.

Data Integrity: Backups provide a secure copy of data, ensuring that critical files are protected and can be restored without corruption or modification caused by ransomware.

Prevents Data Loss: Ransomware attacks often target organizations’ most vital data. Backing up this data regularly ensures that, even in the worst-case scenario, the organization can restore all files without any permanent loss.

Cost Savings: By avoiding the need to pay a ransom, businesses save significant amounts of money that would otherwise be spent on paying cybercriminals or hiring expensive recovery services.

Best Practices for Effective Backups:

3-2-1 Backup Strategy: Keep three copies of your data (one primary copy and two backups), store the backups on two different types of media (external hard drives, cloud storage, etc.), and keep one copy offsite or in the cloud for added protection against local disasters.

Automate Backups: Use automated backup systems that regularly update your files. This reduces the risk of human error and ensures that the latest data is always backed up.

Test Backups Regularly: Ensure that your backups are functional and can be restored effectively by conducting regular tests.

The Role of Encryption in Ransomware Protection

Encryption plays a pivotal role in preventing ransomware from compromising sensitive data. When data is encrypted, it is transformed into an unreadable format that can only be deciphered with the correct decryption key. Ransomware typically encrypts files and demands payment in exchange for the decryption key. By adopting encryption practices, you can take steps to make data inaccessible to attackers, even if they manage to breach your systems.

Here’s why encryption is critical in ransomware defense:

Data Protection: Encrypted files are of no value to cybercriminals because they cannot be read or altered without the decryption key. Even if attackers gain access to your system, the encrypted data remains secure.

Preventing Unauthorized Access: With robust encryption protocols in place, unauthorized users or cybercriminals are unable to view sensitive files or steal valuable intellectual property.

Strengthening Backup Security: Encrypting your backups ensures that even if ransomware infiltrates your backup storage, the attacker won’t be able to access or manipulate the files without the decryption key.

 Securing Data in Transit: Ransomware often spreads through phishing emails or compromised networks. By encrypting sensitive data both in transit (when being sent over networks) and at rest (when stored), you add an extra layer of protection that can help safeguard your information.

Best Practices for Effective Encryption:

Encrypt Sensitive Data: Encrypt all sensitive files, including customer data, financial information, and proprietary business documents.

Use Strong Encryption Standards: Employ advanced encryption algorithms (e.g., AES-256) to ensure the highest level of data security.

Encrypt Backups: Ensure that all backup copies are encrypted, making it difficult for cybercriminals to access and hold data hostage.

Manage Keys Securely: Protect encryption keys and decryption credentials using key management systems to prevent unauthorized access.

How Backup and Encryption Work Together to Mitigate Ransomware Risks

While backup and encryption are powerful defenses individually, when used together, they create a formidable barrier against ransomware attacks.

Backup and Encryption Work in Tandem: When you encrypt your backups, you ensure that even if ransomware targets your backup systems, the attacker will not be able to read or modify the files. The encrypted backups can be restored safely without fear of reintroducing malware into your environment.

Layered Defense: By combining backup and encryption, you’re creating a multi-layered defense strategy that doesn’t rely on a single point of failure. If one layer is compromised, the other still offers a strong line of defense.

Ensuring Complete Data Protection: While backups provide a means of recovery, encryption ensures that your data is not exposed to unauthorized access during the backup process, further strengthening your organization’s data security.

Conclusion: Proactive Measures Against Ransomware Attacks

As ransomware continues to evolve and grow more sophisticated, relying on backup and encryption is no longer optional—it’s a necessity. Backups provide the means to recover from an attack quickly, while encryption ensures that your data remains safe and inaccessible to hackers, even if they breach your network. Together, these two strategies offer a robust defense mechanism that can help organizations minimize the risks and impact of ransomware attacks.

To ensure your defenses are as strong as possible, adopting a proactive cybersecurity strategy that includes regular backups, strong encryption protocols, and employee training on safe digital practices is essential. By doing so, you can significantly reduce your vulnerability to ransomware and protect your most valuable assets—your data.

The post The Critical Role of Backup and Encryption in Ransomware Defenses first appeared on Cybersecurity Insiders.

The post The Critical Role of Backup and Encryption in Ransomware Defenses appeared first on Cybersecurity Insiders.

March 31, 2025 at 11:05AM

Read More

Cybersecurity news headlines trending on Google

New Malware Crocodilus Targets Crypto Wallet Credentials

Malware gangs are continually evolving their tactics to steal sensitive information, especially in the ever-growing world of cryptocurrency. Recently, a new malware variant called Crocodilus has emerged, specifically targeting mobile users in Spain and Turkey who are operating Android versions older than Android 13. This malware has been designed to steal crypto wallet credentials and private keys, posing a significant threat to users who are not using the latest security measures.

Once activated, Crocodilus exhibits alarming capabilities that go beyond simple data theft. It can capture screen content, simulate user gestures, interact with apps, enable call forwarding, send push notifications, and even lock the screen. It can bypass multi-factor authentication (MFA) tools like Google Authenticator and silently operate in the background, stealing information without detection. Crypto enthusiasts are being urged to avoid downloading apps from unverified sources and to refrain from sharing sensitive information, such as seed phrases, both online and offline. Enabling MFA and monitoring security logs are recommended as essential defenses against such sophisticated attacks.

Cybersecurity Vulnerabilities in Solar Power Systems Exposed

A recent survey by Forescout in collaboration with Vedere Labs has uncovered over 46 vulnerabilities in the critical infrastructure of solar power systems, including inverters and associated devices. These vulnerabilities, when exploited by cyber attackers, could lead to severe disruptions in power supply, affecting residential and commercial users alike.

The most concerning aspect of these flaws is their potential to disrupt essential power supplies, causing inconsistent energy delivery to appliances or even a complete shutdown of systems. Experts have found that outdated software and hardware, coupled with weak authentication measures and the lack of encryption, are primary factors contributing to the severity of these risks. As solar energy becomes an increasingly vital part of the global energy landscape, securing these systems against cyber attacks is now more critical than ever.

Clop Ransomware Breaches Sam’s Club Systems

The notorious Clop ransomware gang, known for their targeted attacks on corporate networks, has struck again. This time, their target was Sam’s Club, the American retail giant famous for offering significant discounts during the holiday season. According to reports, the cybercriminals have infiltrated Sam’s Club servers and have threatened to leak sensitive data unless their ransom demands are met.

While much remains unclear, speculation suggests that this attack may have been facilitated through vulnerabilities in the Cleo Secure File Transfer software, which was previously compromised. As Clop ransomware continues to evolve, businesses must prioritize comprehensive cybersecurity strategies to defend against these increasingly sophisticated threats.

Oracle Data Breach Investigated by FBI

A major data breach at Oracle has drawn the attention of the Federal Bureau of Investigation (FBI). Oracle Health, a division of the tech giant, recently confirmed that cybercriminals gained unauthorized access to sensitive patient data and employee information in January 2025. As the investigation unfolds, details of the breach remain scarce, but it is clear that the impact could be far-reaching, affecting the privacy of thousands of individuals. The breach highlights the growing vulnerability of healthcare data and the need for robust security protocols to safeguard against unauthorized access.

Family Offices Face Rising Cybersecurity Risks

According to a Deloitte report, family offices, which manage wealth for high-net-worth individuals, are increasingly becoming targets of cyber attacks. This growing sector, valued at $3 trillion globally, is vulnerable due to its lack of cybersecurity hygiene in storing and processing sensitive client information.

Family offices, often perceived as a low-risk target, have suffered at least 39 cyber incidents in 2024 alone, with 14 additional attacks already reported in 2025. This alarming trend underscores the need for these firms to implement a cyber incident response plan and adopt industry-standard security practices. As these offices hold vast sums of wealth, they are prime targets for hackers looking to exploit weak points in digital security.

Conclusion: Strengthening Defenses in a Digital Age

The rise of cybercrime, from sophisticated malware like Crocodilus targeting crypto wallets to ransomware attacks on major retailers like Sam’s Club, highlights the increasing complexity and frequency of threats across various sectors. Whether it’s securing solar power systems, protecting critical healthcare data, or safeguarding wealth management firms, organizations must stay ahead of cyber adversaries with robust defenses.

By staying informed about the latest threats, such as Clop ransomware, and implementing proactive cybersecurity measures, individuals and businesses can better protect themselves against the ever-evolving landscape of cyber risks. Multi-factor authentication (MFA), strong data encryption, and cyber hygiene are essential components of a resilient cybersecurity strategy.

The post Cybersecurity news headlines trending on Google first appeared on Cybersecurity Insiders.

The post Cybersecurity news headlines trending on Google appeared first on Cybersecurity Insiders.

March 31, 2025 at 10:59AM

Read More

PCI DSS 4.0.1 and Non-Human Identity Management: What You Need to Know

Payment Card Industry Data Security Standard (PCI DSS) 4.0.1 kicks in on March 31, and with it comes stricter security requirements – especially around Non-Human Identities (NHIs). These include system and application accounts such as service accounts, service principals, and roles, as well as their associated authentication factors, including storage access keys, applications, and database users. Despite their critical role in modern IT environments, NHIs are often overlooked in security strategies.

The new requirements emphasize the need for NHIs to be strictly managed. As the deadline nears, how should organizations prepare? Let’s dive in. 

The New Requirements

The first step is understanding what the requirements entail. Here, we will hone in on the new policies outlined in Requirements 7 and 8.

• Least Privilege and Need-to-Know Principles (Requirement 7.2.5): Minimizing access permissions for applications and system accounts to essential functions is a cornerstone of this requirement. By adhering to the principle of least privilege, organizations can prevent over-privileged or outdated access rights, significantly reducing the risk of security breaches and unauthorized exposure.
• Identity and Authentication Policies (Requirement 8.1.1): Defining robust identity and authentication policies ensures consistency and reduces mismanagement risks for non-human identities. This is critical as policies addressing credential rotation, permissions control, and identity governance establish a secure foundation for managing non-human accounts.
• Deactivating Unused Accounts Promptly (Requirement 8.1.3): Dormant application accounts can act as backdoors for attackers. Proactive deactivation workflows mitigate this risk. Automated processes are essential to identifying and deactivating unused accounts promptly.
• Managing Shared and Generic IDs (Requirement 8.2.2): Shared or generic IDs should only be used in exceptional cases with documented justification and management approval. All actions performed with these IDs must be attributable to a specific individual to ensure accountability, traceability, and clear attribution of actions.
• Revoking Access for Terminated Users (Requirement 8.2.5): The immediate removal of access rights for terminated users is critical to ensuring that neither human nor non-human identities can be exploited post-termination. However, secrets such as Access Keys or other credentials left unrotated after an employee’s departure pose significant risks, as these orphaned accounts may still grant unauthorized access. Organizations must integrate robust termination workflows that include revoking human access and ensuring non-human identity credentials associated with offboarded employees are promptly rotated, invalidated or assigned to a new owner. Neglecting this step leaves systems vulnerable to misuse.
• Interactive Login Capabilities (Requirement 8.6): Interactive logins for system and application accounts pose unique challenges, as they increase the risk of unauthorized or misused access. This requirement emphasizes restricting unnecessary interaction with such accounts and documenting their activities. Organizations must monitor and log all interactive login activities, providing justifications and limiting the duration of access to align with security policies.
• Credential Rotation Based on Risk (Requirement 8.6.3): Periodic rotation of access tokens, certificates, and other credentials is critical to mitigate long-term exposure risks. Credential rotation policies reduce the likelihood of prolonged credential exposure.

Why Now?

The rise in attacks targeting NHIs has become too significant to ignore. NHIs are defined in the PCI compliance as application and system accounts used for automated tasks, sometimes shared with manual users, leading to potential misuse. NHIs now require dedicated focus, as their exploitation is increasingly tied to major cybersecurity threats.

Service accounts are a prime target for attackers exploiting weak or misconfigured authentication. As critical entry points into systems, these accounts represent a significant security risk. In fact, nearly 50% of organizations have reported NHI-related compromises, with 66% of those incidents resulting in successful cyberattacks (ESG Report 2024). Attackers frequently leverage exposed API keys, service accounts, and mismanaged secrets, which remain some of the most exploited entry points in recent breaches at Dropbox, Okta, Slack, and Microsoft. Recognizing this growing threat, PCI DSS 4.0.1 highlights the need for stringent controls to address these vulnerabilities, reinforcing the importance of secure authentication and access management practices.

Previously, auditors focused on human identities and overlooked NHIs, but the surge in applications and service accounts misuse and threats necessitates robust controls. As regulatory frameworks evolve, these requirements are no longer about just checking boxes; there’s a need for demonstrable implementation of frameworks, tracking, and remediation. Maintaining consistent and robust security controls across all applications and service accounts has become a key priority. 

PCI DSS 4.0.1 encourages organizations to take compliance beyond just policies by actively resolving issues and providing framework implementation. This, and other industry benchmarks, emphasize the importance of securing NHIs, ensuring compliance, lifecycle management, and mitigating potential risks associated with service account misuse.

How Should Organizations Respond?

To ensure readiness for mandatory compliance, organizations should:

• Assign Ownership & Manage Orphaned Accounts: First, it’s key to map your NHIs and ensure ongoing visibility. Additionally, clearly define ownership for all NHIs and implement processes to detect and manage orphaned accounts, ensuring they are reassigned or deactivated promptly.
• Automate Access Management: Adopting tools that detect stale or over privileged accounts and enforcing least privilege principles are critical for secure application access.
• Enforce Authentication Best Practices: Implement MFA, restricting shared credentials, and ensuring credential rotation based on predefined intervals or risk levels.
• Monitor and Respond to Anomalies: Deploy ITDR solutions to continuously monitor and address suspicious activities related to authentication or application access.
• Secure Application Secrets and Credentials: Store application credentials securely (e.g., avoid hardcoding secrets) and enforce strict permissions control and to regularly rotate these credentials.
• Regularly Review Access Rights: Define clear access control policies and automate the assessment of each identity’s posture and compliance state through policy tests. Use tools to ensure adherence to least-privilege and “need to know” principles, and remove stale permissions to reduce risk. 
• Rotate Secrets Regularly: Define a cadence for secret rotation and align it with the risks associated with each identity, and enforce it. Document your compliance activities throughout the year to demonstrate them to auditors. Generate compliance reports and track trends.

Taking these steps will help ensure organizations are meeting evolving compliance standards and enhance their security posture.

Ensuring Compliance in an Increasingly Regulated World

Enforcement of the PCI DSS 4.0.1 requirements is fast approaching, and organizations must prepare now to address the new requirements. Adopting an NHI management solution will help organizations navigate the new requirements and ensure compliance.

 

 

The post PCI DSS 4.0.1 and Non-Human Identity Management: What You Need to Know first appeared on Cybersecurity Insiders.

The post PCI DSS 4.0.1 and Non-Human Identity Management: What You Need to Know appeared first on Cybersecurity Insiders.

March 29, 2025 at 12:47PM

Read More

Personal Data Exposure: The Silent Cybersecurity Threat That You Need to Address

When users enter a website, it usually prompts them to enter login credentials and often offers the option to save that information for future use. While this feature might be convenient, storing usernames and passwords can pose a security risk for many users.

Saved information can be exposed to being potentially shared across different platforms or accessed by data brokers who, in turn, trade it even further. As a consequence, personal data can end up in the hands of unauthorized third parties. 

Data exposure is a real threat to the protection of your personal data, leading to different risks due to unauthorized access. This usually happens because of outdated security measures, or even a website misdirection. Whichever the case, its risks to user privacy are too significant to dismiss.

This article will explore the silent cybersecurity threat that is personal data exposure, why it’s often overlooked, and how to minimize its risks.

Exposed Data: The Risks Involved

Data exposure often occurs when sensitive information is accessed and exposed by unauthorized parties. It should not be confused with a data breach, which happens when an intentional attack is planned to steal data.

One of the most dangerous risks in the event of data exposure is identity theft. It happens when Personally Identifiable Information (PII) falls into the hands of unauthorized parties. It opens up possibilities for potentially falsifying government records using that person’s information.

The second significant risk resulting from data exposure is financial fraud. Anybody would take the risk of having their bank account emptied and making illegal purchases very seriously.

Additional risks include cyberattacks and potential phishing attempts when personal information is exposed online, along with websites disguised as companies or banks that acquire your information through blatant deception. 

A Gap in Security

Protecting personal data from exposure can be a complicated challenge, which is why careful attention and proactive measures are the key aspects. Plenty of factors point to the reason why this security risk can be easily overlooked when talking about online security.

• Low Awareness: Either through shady data collection practices or a lapse in judgment,  plenty of users overlook how much of their personal information is collected, and sold online.
• Long-term effort: Choosing to control how much personal data is shared online and removing the rest is an ongoing and time-consuming process. Most people don’t have the time, or patience to put in that much work.
• Repopulation: Data resurfaces after a while through constant collection and transmission. Starting with a clean online slate, with enough time, the removed data will emerge again.
• Far-sighted consequences: Data exposure is a risk where consequences aren’t immediately felt, which leads to a perceived low risk.

From long-term consequences to a low-perceived risk, data exposure is an issue that is both difficult to identify, and at times, hard to act on.

How to Minimize Personal Data Exposure

Tackling this threat requires time and patience. Because of this, even award-winning cybersecurity companies, for example, Microsoft, sometimes struggle when tackling this issue. 

Here are a few steps on how you can minimize data exposure: 

1.Scan for Old Accounts

Old or unused accounts can often be a front for data exposure. Erasing accounts that are no longer used decreases the risk of personal information getting exposed.

2.Adjust Privacy Settings

Plenty of sites offer options for making an account private, which in turn, reduces access from unauthorized individuals.

3.Employ a VPN

A VPN offers an extra layer of security that hides both personal information and search history from malevolent third parties and internet service providers. 

4.Manage Your Passwords

Password managers are convenient for keeping passwords for different websites, saved and automatically filled. However, an unprotected device can lead to all of these passwords getting leaked, and accounts compromised. Keeping track of your password manager, and which devices have them, increases online security.

5.Use Data Removal Services

Data brokers can often trade any information online from their databases. Making use of data removal services sets a precedent for a long-term effort to protect online privacy from potentially dangerous parties.

6.Pay Close Attention to Websites

Websites can disguise themselves as a bank or company, with carefully crafted sites designed to steal any information. While it can be difficult to detect, extreme caution should be exercised in this case. A general rule of thumb is, that if something online sounds too good to be true, chances are, it probably is.

Personal data exposure is a concealed issue many people tend to overlook during their online activities. Its consequences aren’t immediate and tend to manifest after some time. This is precisely why it builds up as one of the major cybersecurity threats.

Minimizing the risks of personal data exposure requires proactive protection, and after all personal information is best kept private. 

 

The post Personal Data Exposure: The Silent Cybersecurity Threat That You Need to Address first appeared on Cybersecurity Insiders.

The post Personal Data Exposure: The Silent Cybersecurity Threat That You Need to Address appeared first on Cybersecurity Insiders.

March 29, 2025 at 11:31AM

Read More

Safeguarding Patient Data and Embracing Emerging Technologies

The healthcare industry is particularly vulnerable to cybersecurity threats due to the valuable data it processes; Protected Health Information (PHI) is among the most sensitive and valuable data in existence. As the past few years have shown, the consequences of a breach can be costly and, in the most severe cases, impact patient care, highlighting the critical need for standardized industry practices and regulations to uphold accountability.

Organizations often develop their cybersecurity measures internally since legislative direction has been limited and typically is written to be flexible and technology-agnostic. Seeing this gap, several groups are attempting to establish the most robust industry standards for healthcare organizations to improve security and privacy. For the first time since 2013, the U.S. Department of Health and Human Services (HHS) drafted a proposal to modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule with the goal of strengthening cybersecurity protections for electronic protected health information (ePHI). The most significant change proposed by HHS in their Notice of Proposed Rulemaking (NPRM) is the reclassification of certain security controls from being merely suggestions to now being absolutely mandatory. Included in this is multi-factor authentication (MFA), signaling a significant shift from the previous HIPAA verbiage, which was flexible and adaptable based on an organization’s size and focus.

It remains uncertain whether HHS’ proposal will be enacted. However, it has already prompted a wave of additional regulatory initiatives in the healthcare sector, including the Artificial Intelligence in Health Care Services Bill and the Health Care Cybersecurity and Resiliency Act of 2024.

Navigating the Current Landscape: Security of Artificial Intelligence

Healthcare’s extensive collection of sensitive data makes it especially vulnerable to cyberattacks. As the industry continues to embrace new digital technologies, specifically artificial intelligence (AI), data processing and sharing will increase in speed and volume. Therefore, incorporating standard security measures to control the hazards related to digital growth will be paramount.

A recent McKinsey & Company report revealed that despite a strong desire to increase AI investments and accelerate development, many leaders are wrestling with making AI safe in the workplace. Core challenges include data security, AI hallucinations, biased outputs, and potential misuse. Similarly, employees’ top concerns revolve around cybersecurity, privacy, and accuracy. 

These security challenges and concerns make many businesses and employees hesitant to adopt AI. However, healthcare companies should not shy away from this advancement, as AI is rapidly becoming an effective way of delivering optimal patient care.

Leaders who are worried about AI should focus on allowing for incremental adoption in their businesses. A phased rollout of AI software can help healthcare organizations reduce hesitancy while still upholding security and privacy. A practical approach is to initially grant AI software licenses to a small group of employees for testing and evaluation. Once the software is deemed secure and free of critical vulnerabilities, a phased rollout to larger groups can be implemented.

Additionally, to balance progress with caution, organizations must establish clear guidelines for AI adoption, enabling innovation without compromising data integrity or patient trust.

Safeguarding Technology from the Start: Code Scanning

One of the most effective ways to secure technology and protect sensitive data is by implementing the proactive safety measure of code scanning. Before deploying software, organizations should thoroughly examine source code for potential vulnerabilities that could be exploited. Healthcare organizations should utilize reputable code-scanning tools to detect weaknesses during development and filter critical vulnerabilities to development teams for immediate remediation. Identifying and fixing vulnerabilities early in the development process allows for a more secure launch of applications to protect patient data, providing both security and data privacy for each individual utilizing healthcare software.

Staying Ahead of Emerging Threats

As healthcare organizations scale, adopting proactive cybersecurity measures will be essential to safeguarding patient data and maintaining trust. Emerging technologies like AI and the growing volume of sensitive data emphasize the need for prompt implementation of standardized security practices. To align with these standardized security practices, healthcare organizations should closely monitor emerging regulations to understand and implement the necessary enhancements to stay compliant.

 

The post Safeguarding Patient Data and Embracing Emerging Technologies first appeared on Cybersecurity Insiders.

The post Safeguarding Patient Data and Embracing Emerging Technologies appeared first on Cybersecurity Insiders.

March 28, 2025 at 03:20PM

Read More

State of Cloud Security Report 2025

Key Insights and Strategies for Protecting Cloud Environments

Introduction

Cloud adoption is continuing to transform the IT infrastructure and security landscapes by delivering unmatched scalability and flexibility. Multi-cloud strategies further enhance these advantages but introduce unique challenges, prompting organizations to implement innovative solutions to safeguard their critical assets effectively.

The 2025 State of Cloud Security Report, based on insights from 873 cybersecurity professionals, provides an in-depth analysis of the evolving cloud security landscape, highlighting key trends, challenges, and priorities for organizations navigating increasingly complex environments. This report serves as a guide for IT and security professionals seeking to strengthen their hybrid and multi-cloud security posture while continuing innovation.

Key findings from this report include: 

• Hybrid and Multi-Cloud Strategies on the Rise: Over 78% of respondents utilize two or more cloud providers, underscoring the growing importance of multi-cloud approaches to enhance resilience and leverage specialized capabilities. 54% of organizations have adopted hybrid cloud models, integrating on-prem and public cloud environments to optimize flexibility and control. 
• Security and Compliance Top Concerns: Security and compliance issues are the primary barriers to cloud adoption, cited by 61% of organizations striving to meet regulatory requirements and protect sensitive data.
• Skills Gap in Cloud Security Expertise: 76% of organizations report a shortage of expertise in cloud security, highlighting the need for automation, targeted upskilling, and resource optimization. 
• Low Confidence in Real-Time Threat Detection: The survey data highlights that 64% of respondents lack confidence in their organization’s ability to handle real-time threat detection.
• Unified Cloud Security Platforms: The survey shows 97% of respondents prefer unified cloud security platforms with centralized dashboards to simplify policy configuration, ensure consistency, and enhance visibility across an organization’s cloud footprint.
• Rapid Adoption of Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platforms (CNAPP): To address misconfigurations and compliance gaps, 67% of  respondents are implementing CSPM and 62% CNAPP solutions to protect cloud environments.

This report underscores the importance of unified cloud security solutions that streamline policy enforcement, automate threat detection, and ensure consistent protection across hybrid and multicloud environments. By leveraging these insights and best practices, organizations can build a resilient cloud security posture that adapts to evolving threats and business demands.

We extend our sincere gratitude to Fortinet, a global leader in cloud security, for their invaluable contribution to this research. Their expertise and insights into securing hybrid and multi-cloud environments have significantly strengthened the findings and recommendations presented in  this report.

We hope this report serves as a valuable resource for IT and cybersecurity professionals striving to secure their organizations in this era of rapid cloud expansion.

Thank you,

Holger Schulze Founder

Cybersecurity Insiders

Shifting Cloud Deployment Strategies

The choice of an organization’s cloud deployment strategy directly impacts its security needs, operational outcomes, and infrastructure requirements, making it a pivotal decision in today’s multi-faceted IT environments.

The survey findings show that hybrid cloud is the predominant strategy, chosen by 54% of respondents, up from 43% last year. This growth reflects a strong shift away from single-cloud toward integrating multiple cloud services with on-premises systems into cohesive environments. For example, a retail company might use a public cloud to host customer-facing applications while retaining sensitive payment data in a private on-premises system to meet compliance requirements like PCI DSS. Such hybrid strategies allow organizations to enjoy the scalability of public clouds while maintaining control over critical data. 

Multi-cloud deployments, which are critical for scenarios where organizations distribute workloads across providers to avoid vendor lock-in or utilize specific capabilities, follow at 28%. For instance, a tech company might host its compute-heavy applications on Amazon Web Services (AWS) while using Google Cloud’s advanced AI services for data analytics, ensuring they optimize performance while mitigating reliance on a single provider.

Single cloud adoption is becoming less common, with just 18% relying on a single provider (down from 22% in 2024), often reflecting simplicity in management at the potential cost of reduced flexibility. This may be the preferred model for smaller businesses, such as a law firm exclusively using Microsoft’s Azure for its document storage and workflow management, prioritizing ease of management over diversification.

Expanding Multi-Cloud Adoption

The increasing number of cloud providers that organizations use reflects the evolving preference for hybrid and multi-cloud strategies, as well as the operational complexity they introduce. 

The survey results reveal that 78% of organizations use two or more cloud providers, up from 71% last year, marking a 7-point increase that underscores the growing shift toward multi-cloud adoption. For example, a multinational company might use AWS for its global content delivery network while relying on Microsoft Azure’s compliance-ready offerings in regions with strict data residency laws. The strategic use of multiple providers enables businesses to leverage specialized capabilities, such as AI services from Google Cloud or Oracle Cloud’s database expertise, while ensuring resilience through redundancy.

Dominance of Major Cloud Providers

Understanding which cloud service providers organizations currently use, or plan to adopt, sheds light on market preferences and reveals how businesses align their cloud strategies with evolving workloads and specialized capabilities.

The findings confirm Microsoft Azure and AWS as dominant players, with 76% and 70% of respondents reporting current usage, respectively. 

Currently used by 52% of respondents, the Google Cloud Platform is gaining interest, as reflected by 25% of respondents planning to adopt it in the future.

Meanwhile, Oracle Cloud and IBM Cloud maintain smaller market shares but see notable future interest, likely driven by their expertise in integrating with enterprise legacy systems. 

Overcoming Barriers to Cloud Adoption

The survey reveals the primary barriers organizations face in adopting cloud services, highlighting the challenges IT and security teams must address to fully realize the potential of cloud environments.

Security and compliance concerns remain the top challenge, cited by 61% of respondents (up from 59% in last year’s survey). This reflects growing interest around issues like data leakage and the complexities of meeting regulatory requirements. For instance, a healthcare organization might delay migrating sensitive patient records to the cloud due to uncertainty around compliance with HIPAA or other regional data protection laws.

Organizational and operational factors follow closely at 54% (moving up to #2 spot from 49% last year), highlighting challenges such as resistance to change, vendor lock-in concerns, and cultural hurdles. A manufacturing company, for example, may face internal pushback when moving legacy systems to the cloud due to fears of losing control over proprietary processes.

Resource constraints, including limited staff expertise and budgetary restrictions, are cited by 51% (up from 49% in 2024), emphasizing the difficulty many organizations face in managing and securing cloud capabilities. Meanwhile, technical challenges, though slightly less prominent this year at 48%, still represent a substantial barrier, particularly when integrating complex hybrid cloud environments.

Public Cloud Security Concerns

Persistent concerns about the security of public clouds reflect the ongoing challenge of balancing the benefits of scalability and agility with the need for robust protection. 

A staggering 92% of survey respondents expressed concern about public cloud security, underscoring its importance as a critical area of focus for IT and cybersecurity professionals.

This apprehension aligns with findings in this survey where 61% identified security and compliance as the top barrier to cloud adoption. For example, a financial services firm considering cloud migration for customer transaction data might hesitate due to fears of regulatory non-compliance or potential exposure of sensitive information through misconfigurations. Such concerns extend to specific risks, including data leakage, shared responsibility confusion, and limited visibility into cloud provider activities, further complicating adoption decisions.

Operational Challenges in Cloud Security

Managing day-to-day cloud security operations reveals the complex and evolving hurdles organizations face in securing their environments. 

Data security and privacy emerges as the top concern, identified by 63% of respondents, reflecting ongoing fears about protecting sensitive information and preventing leaks. Access control and identity management follows at 59%, underscoring the need for robust authentication and privilege management in distributed cloud environments. A hybrid cloud deployment, for instance, may face challenges in synchronizing user access policies across on-premises systems and cloud platforms.

Configuration and misconfiguration management is a close third at 56%, illustrating the operational difficulty of ensuring proper cloud setups — such as monitoring for unintentional public exposure of cloud storage buckets, a scenario that has led to numerous high-profile breaches.

Cloud security management (55%), threat detection and response (54%), and policy and compliance management (47%) collectively highlight the need for consistent and scalable solutions to manage multi-cloud environments.

Securing Multi-Cloud Environments

Securing multi-cloud environments introduces distinct challenges stemming from their inherent complexity, lack of standardization, and rapidly evolving technologies. These issues directly impact organizations’ ability to protect sensitive data, maintain operational efficiency, and manage diverse cloud ecosystems.

Ensuring data protection and privacy for each environment continues to be the leading challenge, cited by 58% of respondents, up from 55% in 2024. This mirrors earlier findings in our survey where data security and privacy were identified as the top operational concern (63%), emphasizing the need for consistent safeguards across fragmented cloud infrastructures. 

Loss of visibility and control, at 55%, underscores the difficulty of maintaining oversight in multi-cloud setups—a concern echoed previously where 55% highlighted cloud security management as a daily challenge. 

The lack of skills to deploy and manage comprehensive multi-cloud solutions is cited by 53%. Challenges such as keeping up with the rate of change (45%) and understanding how different solutions fit together (43%) reflect the operational and strategic hurdles of navigating the rapid evolution of cloud technologies.

Low Confidence in Real-Time Threat Detection

The ability to detect and respond to threats across cloud environments in real time is critical as organizations adopt increasingly complex multi-cloud and hybrid strategies. These architectures introduce unique challenges in achieving seamless visibility and rapid responsiveness across disparate platforms.

The survey data highlights a significant confidence gap, with 64% of respondents indicating they lack confidence in their organization’s ability to handle real-time threat detection. For example, an organization may lack the ability to link together a series of isolated malicious actions, leading to significant delays in identifying and responding to a potential breach. This trend suggests that while many organizations have foundational security measures in place, the growing sophistication of cloud threats and the challenges of managing diverse environments leave them vulnerable to advanced attacks and misconfigurations. Survey findings discussed earlier align with this, showing that loss of visibility and control (55%) and challenges in threat detection and response (54%) are top barriers in cloud security operations.

Only 10% of respondents report being extremely confident and another 26% feel very confident, leaving fewer than 40% well-prepared for the demands of modern cloud threat management. 

Cloud Security Priorities

As organizations expand their cloud footprints, deploying the right mix of security capabilities is essential to ensure resilience, compliance, and operational efficiency in the face of growing threats.

When asked about the adoption priorities for critical cloud security tools over the next 12 months, Cloud Security Posture Management (CSPM) leads with 67%, underscoring its critical role in identifying and remediating misconfigurations across cloud environments. For example, a CSPM tool might alert a retailer of publicly exposed storage buckets in AWS, preventing a costly data breach. 

Similarly, Cloud Native Application Protection Platforms (CNAPP), at 62%, showcase growing recognition of the need for end-to-end application lifecycle security. A CNAPP might proactively flag vulnerabilities in containerized workloads running in Kubernetes, identify malicious runtime activity, and detect a chain of events that indicate compromise. Close behind, Cloud Workload Protection Platforms (CWPP), at 60%, and Cloud Detection and Response (CDR), at 59%, highlight the increasing focus on workload security and threat mitigation, especially in multi-cloud setups. The adoption of Cloud Infrastructure Entitlement Management (CIEM), at 50%, further demonstrates the demand for robust access and privilege controls across diverse cloud platforms and the drive towards implementing least privilege or eliminating unused credentials.

Addressing the Cybersecurity Skills Gap

The industry-wide shortage of qualified cybersecurity professionals continues to be a critical issue that directly impacts an organization’s ability to protect its assets and respond effectively to evolving threats. 

The findings reveal that 95% of respondents are moderately to extremely concerned about the ongoing cybersecurity skills shortage, highlighting the significant strain it places on organizations as they struggle to recruit and retain the talent needed to address increasingly complex cybersecurity challenges. For instance, a healthcare provider struggling to implement multi-cloud security controls might face delays due to the lack of specialized talent in cloud-specific skills like configuration management or CIEM. 

This concern is validated by survey data showing that 76% of organizations are experiencing a cybersecurity talent shortage today.

Key Security Skills for Today’s Threats

The survey findings on the most important security skills highlight the diverse and evolving expertise organizations require to tackle increasingly complex cloud security challenges. 

Cloud and application security skills lead the list at 65%, reflecting the priority organizations place on securing cloud platforms and applications. For example, expertise in cloud platform-specific security might involve creating automated guardrails and scalable, secure landing zones, all available as code for automated deployment.

Identity and access management follows closely at 61%, emphasizing the need for robust access controls, particularly in hybrid and multi-cloud environments where unified user privilege management is essential. Technical and advanced security skills (58%) and threat intelligence and analysis (57%) reflect the rising demand for specialists capable of leveraging AI and understanding sophisticated adversary tactics, in order to quickly identify and mitigate malicious activity, particularly for compromised cloud admin accounts. Skills in incident response and forensics (55%) remain essential for mitigating breaches, while security monitoring and operations (52%) showcase the need for expertise in detecting anomalies and accelerating mitigation.

Investment Trends in Cloud Security

The survey results reveal fresh insights into how organizations are prioritizing their financial resources to address cloud security challenges. A majority of 63% of respondents report plans to increase their cloud security budgets in the next 12 months (up from 61% last year), signaling a strong recognition of the need to bolster defenses in hybrid and multi-cloud setups. 

Meanwhile, 31% indicate unchanged budgets (down from 32% in 2024), likely reflecting organizations that have already invested heavily or are managing consistent operational needs. Only 6% expect a decrease, a rare trend in an era of escalating cloud threats and regulatory requirements. 

On average, 35% of IT security budgets are allocated to security budgets, demonstrating that cloud protection is becoming a focal point of overall security spending, particularly as cloud adoption accelerates.

This growing emphasis on cloud security investment reflects a proactive approach to addressing gaps in visibility, access control, and threat detection—challenges cited throughout this report. Organizations planning budget increases should focus on solutions that efficiently integrate key capabilities, such as CNAPP, to maximize the impact of their investment.

The Value of Unified Cloud Security Platforms

The value of a single, unified cloud security platform with a centralized dashboard lies in its potential to simplify policy configuration, ensure consistency, and enhance visibility across an organization’s cloud footprint. 

The survey results show overwhelming interest in the concept, with 97% of respondents finding such a platform either moderately to extremely helpful. For example, a single dashboard could allow a financial services organization to apply uniform access controls across AWS, Azure, and Google Cloud, reducing the likelihood of configuration errors. This aligns with earlier findings where 55% of respondents cited loss of visibility and control as a primary challenge in multi-cloud and hybrid environments, emphasizing the need for centralized tools to close these gaps. 

Best Practices for Stronger Hybrid &  Multi-Cloud Security

As organizations increasingly adopt hybrid and multi-cloud environments, managing diverse providers and maintaining robust security becomes more complex. To navigate these challenges effectively, it’s essential to implement strategic best practices that align with industry insights and leverage advanced security solutions. 

The following recommendations offer actionable steps to enhance your multi-cloud security posture.

1.AUTOMATE DETECTION AND REMEDIATION OF CLOUD RISKS

Misconfigurations are a common vulnerability, with 67% of respondents either using or planning to adopt automated tools to address this issue. Continuous monitoring and real-time remediation solutions can proactively identify risks, such as misconfigured storage or excessive permissions, and correct them efficiently. These tools also simplify compliance with industry regulations.

2.PROTECT DATA FLOWS ACROSS CLOUD ENVIRONMENTS

As data moves between cloud environments, it is crucial to ensure its security and integrity. With 58% of respondents highlighting data protection and privacy as a top concern, leveraging tools that provide comprehensive visibility into data flows helps organizations safeguard information during transit. These tools enable monitoring for potential risks, prevent unauthorized access, and facilitate adherence to regulatory frameworks like GDPR and CCPA, enhancing overall data protection efforts.

3.IMPLEMENT UNIFIED THREAT DETECTION MECHANISMS

Over half of respondents (54%) highlighted difficulties in detecting and responding to threats across multi-cloud environments. Unified threat detection solutions centralize visibility, allowing teams to identify and respond to anomalies quickly. These tools can correlate data across different cloud environments to reduce detection times and improve response accuracy.

4.INVEST IN CLOUD-SPECIFIC TRAINING FOR SECURITY TEAMS 

Skills shortages impact 76% of organizations, limiting their ability to deploy and manage cloud-native solutions effectively. Upskilling employees in areas like DevSecOps and container security empowers teams to address emerging security challenges.

5.UTILIZE POLICY-AS-CODE FOR CONSISTENT SECURITY ENFORCEMENT

As 43% of respondents reported challenges understanding how different solutions integrate, leveraging policy-as-code approaches ensures consistent enforcement across platforms. Policyas-code simplifies audits and enables automated configuration management, ensuring that security controls remain aligned with organizational requirements.

6.ALIGN SECURITY INVESTMENTS WITH APPLICATION WORKLOAD REQUIREMENTS

Application-level security is a growing priority, with 62% of respondents planning to adopt comprehensive protection platforms. End-to-end security for applications, from development to runtime, ensures tailored protection for workloads while supporting consistent policies across environments. Solutions that integrate with containerized environments and runtime protections address this need effectively.

7.STANDARDIZE ACCESS CONTROLS ACROSS CLOUD PLATFORMS

Access control and identity management remains a top challenge for 59% of organizations, especially in distributed cloud setups. Centralized access control solutions can streamline user privilege management and enforce consistent security policies across hybrid and multi-cloud environments. Implementing a unified identity platform ensures seamless policy enforcement while minimizing the risk of unauthorized access.

8.EMBRACE CLOUD-BASED SECURITY TOOLS FOR SCALABILITY

With 54% of respondents identifying hybrid cloud as their primary deployment model, scalable cloud-based security tools are essential. These solutions enable consistent protection across on-premises systems and public clouds, ensuring organizations can expand their cloud footprints without compromising operational efficiency.

Conclusion

This report underscores the importance of strategic investment in unified tools, training, and processes tailored to the evolving demands of hybrid and multi-cloud security. By addressing the challenges—such as misconfigurations, skills gaps, and lack of visibility—organizations can build a resilient security posture. 

Implementing the best practices provided in this report equips businesses to thrive in complex cloud environments, safeguarding critical assets while maintaining agility and compliance in an era of rapid digital transformation.

Cloud Security Glossary

This glossary provides a quick overview of essential cloud security technologies discussed in this report, focusing on what they do, the security challenges they solve, and why they matter in protecting today’s complex cloud environments.

Application Security Posture Management (ASPM) – ASPM provides visibility into application vulnerabilities and configuration issues across the software development lifecycle. It supports secure coding practices and integrates security into DevSecOps workflows. ASPM is crucial for ensuring that applications remain secure from development through deployment and runtime.

Cloud Detection and Response (CDR) – CDR is a specialized technology that identifies and mitigates threats in cloud environments. It offers real-time visibility into cloud activities, enabling quick detection of anomalies and swift incident response. CDR is crucial for maintaining a strong defense against sophisticated threats in distributed cloud setups.

Cloud Infrastructure Entitlement Management (CIEM) – CIEM focuses on managing permissions and access controls within cloud environments. It identifies excessive permissions, enforces least-privilege principles, and reduces the risk of privilege misuse. CIEM is important for maintaining secure and compliant access policies in multi-cloud architectures.

Cloud Native Application Protection Platform (CNAPP) – CNAPP integrates multiple security functions to protect cloud-native applications throughout their lifecycle. It combines workload protection, configuration management, and runtime defense to secure containers, serverless functions, and other cloud-native workloads. CNAPP is essential for organizations adopting modern development practices like DevOps and microservices.

Cloud Security Posture Management (CSPM) – CSPM is a solution designed to automate the detection of misconfigurations in cloud environments. It continuously monitors cloud infrastructure for security risks, such as exposed storage buckets or overly permissive access controls, ensuring compliance with regulatory frameworks. CSPM is critical for maintaining visibility and addressing vulnerabilities in multi-cloud and hybrid environments.

Cloud Workload Protection Platform (CWPP) – CWPP secures workloads across cloud environments, including virtual machines, containers, and serverless architectures. It provides visibility into vulnerabilities, ensures consistent security policies, and protects workloads from advanced threats. CWPP is key for organizations managing diverse and dynamic cloud workloads.

Data Security Posture Management (DSPM) – DSPM is a data-centric solution that identifies, classifies, and secures sensitive information in cloud environments. It ensures that data is properly protected and aligns with privacy regulations like GDPR and CCPA. DSPM is vital for addressing the challenges of safeguarding sensitive information across complex cloud ecosystems.

Methodology and Demographics

The 2025 Cloud Security Report is based on a comprehensive survey conducted in late 2024, gathering insights from 873 IT and cybersecurity professionals across a range of countries and industries, including technology, financial services, healthcare, and government. Respondents represented organizations of varying sizes, from small businesses to large enterprises, and included professionals in roles ranging from specialists to C-level executives. 

The survey, conducted online, explored key trends, challenges, and priorities in cloud security. The findings provide a well-rounded view of how organizations are navigating the complexities of cloud environments and adopting security technologies to address emerging threats.

For questions that allow respondents to select multiple answers, the percentages may total more than 100%, as participants could choose more than one option.

__

Fortinet (NASDAQ: FTNT) secures the largest enterprises, services providers, and government organizations around the world. Fortinet empowers our customers with complete visibility and control across the expanding attack surface and the power to take on ever-increasing performance requirements today and into the future. Only the Fortinet Security Fabric platform can address the most critical security challenges and protect data across the entire digital infrastructure, whether in networks, application, multi-cloud, or edge environments.  Fortinet ranks #1 as a security company, with more than 800,000 clients who trust their solutions and services to  protect their businesses. www.fortinet.com

__

Cybersecurity Insiders brings together 600,000+ IT security professionals and world-class technology vendors to facilitate smart problem-solving and collaboration in tackling today’s most critical cybersecurity challenges. Our approach focuses on creating and curating unique content that educates and informs cybersecurity professionals about the latest cybersecurity trends, solutions, and best practices. From comprehensive research studies and unbiased product reviews to practical e-guides, engaging webinars, and educational articles – we are committed to providing resources that provide evidence-based answers to today’s complex cybersecurity challenges. Contact us today to learn how Cybersecurity Insiders can help you stand out in a crowded market and boost demand, brand visibility, and thought leadership presence. Email us at info@cybersecurity-insiders.com or visit cybersecurity-insiders.com

 

The post State of Cloud Security Report 2025 first appeared on Cybersecurity Insiders.

The post State of Cloud Security Report 2025 appeared first on Cybersecurity Insiders.

March 28, 2025 at 02:05PM

Read More

BlackLock Ransomware gang infrastructure breached and info passed to law enforcement

For the first time, a team of security researchers has successfully infiltrated the network of a ransomware operation, exploiting a vulnerability to gather critical information and pass it on to law enforcement authorities. This unprecedented action has given law enforcement crucial insights into the activities of the BlackLock ransomware gang, allowing them to preemptively neutralize threats and take proactive security measures.

In November 2024, Resecurity, a renowned cybersecurity firm, discovered a vulnerability in a data leak website accessible only through the TOR network. Using this vulnerability, they were able to infiltrate the network of the BlackLock ransomware gang, a notorious group responsible for widespread cyber-attacks. By gaining access to this network, Resecurity was able to gather significant intelligence, including information on the gang’s location, earnings, future attack plans, and financial activities.

By March 2025, Resecurity had compiled enough evidence to pass on to law enforcement agencies, providing them with a detailed understanding of the gang’s operations. This intelligence was crucial in giving cybercrime investigators the upper hand, allowing them to implement proactive security measures before an attack could take place. In one notable instance, this intelligence helped prevent a Canadian organization from being targeted by a ransomware attack. The company, which was scheduled to be attacked two weeks later, was safeguarded due to the timely intervention of law enforcement.

In an interesting turn of events, the Resecurity researchers discovered that the BlackLock gang had a 6-folder database, 5 of which were not encrypted. Upon further analysis, the researchers uncovered detailed records of the gang’s earnings over the past year from various victim organizations. This discovery highlighted not only the scale of the ransomware group’s operations but also the immense financial gains they had accrued from their malicious activities.

While the cybersecurity industry typically discourages hacking and illegal activities, this incident raises important questions about the role of cybersecurity firms in combating cybercrime. If cybersecurity companies can infiltrate and disrupt ransomware operations by exploiting vulnerabilities in hacker infrastructure, they could significantly reduce the crime rate. Such actions could create an environment where cybercriminals are either deterred from launching attacks or find it increasingly difficult to operate within the dark web ecosystem. This, in turn, could lead to a decrease in cybercrime and force threat actors to reconsider their involvement in such illicit activities, potentially seeking alternative careers outside the world of cybercrime.

The post BlackLock Ransomware gang infrastructure breached and info passed to law enforcement first appeared on Cybersecurity Insiders.

The post BlackLock Ransomware gang infrastructure breached and info passed to law enforcement appeared first on Cybersecurity Insiders.

March 28, 2025 at 11:02AM

Read More

G2 Names INE 2025 Cybersecurity Training Leader

Cary, North Carolina, March 27th, 2025, CyberNewsWire

INE, a global leader in networking and cybersecurity training and certifications, is proud to announce it is the recipient of twelve badges in G2’s Spring 2025 Report, including Grid Leader for Cybersecurity Professional Development, Online Course Providers, and Technical Skills Development, which highlight INE’s superior performance relative to competitors. 

“INE solves the problem of accessible, hands-on security training with structured learning paths and real-world labs,” says SOC Analyst Sai Tharun K. “It helps bridge the gap between theory and practical skills. For me, it has been very valuable in refining my penetration testing, cloud security, and threat analysis skills.”

G2 calculates rankings using a proprietary algorithm sourced from verified reviews of actual product users and is a trusted review source for thousands of organizations around the world. Its recognition of INE’s strong performance in enterprise, small business, and global impact for technical training showcases the depth and breadth of INE’s online learning library. 

“We’re incredibly proud to once again be at the forefront of the training industry, recognized by G2 users in a time when cyber threats are escalating in both frequency and complexity,” said Dara Warn, CEO of INE. “This recognition reflects our commitment to providing training that not only keeps pace with but anticipates the dynamic intersection of cybersecurity with networking, cloud services, and broader IT disciplines. At INE, we believe deeply in equipping professionals and organizations with the robust, up-to-date skills necessary to navigate and secure today’s rapidly changing digital landscapes. A huge thank you to our dedicated team and learners, who are essential in our mission to transform cybersecurity training to meet the urgent demands of the current environment.”

INE’s G2 Spring 2025 Report highlights include:

• Momentum Leader, Cybersecurity Professional Development
• Momentum Leader, Online Course Providers
• Momentum Leader, Technical Skills Development
• Grid Leader, Cybersecurity Professional Development
• Grid Leader, Online Course Providers
• Grid Leader, Technical Skills Development
• Regional Leader, Europe Online Course Providers
• Regional Leader, Asia Online Course Providers
• Regional Leader, Asia Pacific Online Course Providers
• Grid Leader, Small-Business Technical Skills Development
• Grid Leader, Small-Business Online Course Providers
• High Performer, India Online Course Providers

“INE’s hands-on labs and real-world scenarios have helped me refine by skills,” said Leonard R.G., a Pentesting Consultant. “INE is solving the hiring issues most HR people have when they are hiring cybersecurity workers,” adds Batuhan A., a Cyber Security Researcher. 

In 2024, the prestigious SC Awards recognized INE Security, INE’s cybersecurity-specific training, as the Best IT Security-Related Training Program. This designation further underscores INE Security’s role as a frontrunner in cybersecurity training for businesses, providing the tools and knowledge essential for tackling today’s complex cyber threats.

INE Security was also presented with 4 awards from Global InfoSec Awards at RSAC 2024, including: 

• Best Product – Cybersecurity Education for Enterprises
• Most Innovative – Cybersecurity Education for SMBs
• Publisher’s Choice – Cybersecurity Training
• Cutting Edge – Cybersecurity Training Videos

Combined, these accolades highlight INE’s leadership in delivering innovative and effective networking and cybersecurity education across various market segments, including enterprises and small to medium-sized businesses.

About INE Security

INE Security is the premier provider of online networking and cybersecurity training and certification. Harnessing a powerful hands-on lab platform, cutting-edge technology, a global video distribution network, and world-class instructors, INE Security is the top training choice for Fortune 500 companies worldwide for cybersecurity training in business and for IT professionals looking to advance their careers. INE Security’s suite of learning paths offers an incomparable depth of expertise across cybersecurity and is committed to delivering advanced technical training while also lowering the barriers worldwide for those looking to enter and excel in an IT career.

Contact

Kathryn Brown
INE Security
kbrown@ine.com

The post G2 Names INE 2025 Cybersecurity Training Leader first appeared on Cybersecurity Insiders.

The post G2 Names INE 2025 Cybersecurity Training Leader appeared first on Cybersecurity Insiders.

March 27, 2025 at 06:15PM

Read More