Last Week in Cloud Security January 02 2025

[Omer_Shliva]

Vulnerabilities and Case Studies Exposed Cloud Server Tracks 800,000 Volkswagen, Audi, and Skoda EVs A recent report from the German news outlet Spiegel has revealed a significant security breach impacting hundreds of thousands of Volkswagen Group electric vehicle owners. The investigation found that sensitive location data for 800,000 vehicles, including those from Volkswagen, Audi, SEAT, and Skoda, was left exposed on an unsecured cloud server for months. READ MORE Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation Cybersecurity researchers have uncovered three security weaknesses in Microsoft's Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to gain the ability to conduct various covert actions, including data exfiltration and malware deployment. READ MORE FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits Researchers at FortiGuard Labs have identified a prolific attacker group known as “EC2 Grouper” who frequently exploits compromised credentials using AWS tools. READ MORE

Competitive Information Introducing Upwind Dashboards: Simplify Security Monitoring & Reporting This dashboard is Upwind’s new home page, providing executives with an easy, clear view of their overall cloud risk and security posture. READ MORE