OwnCloud Encryption Issues Vulnerabilities

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. An encryption issue vulnerability exists in OwnCloud. The vulnerability stems from a lock protection mechanism that can be bypassed by moving the system date/time to the past. No details of the...

OwnCloud Code Issues Vulnerabilities

Owncloud OwnCloud is a suite of personal cloud storage solutions from OwnCloud USA. A code issue vulnerability exists in OwnCloud that stems from a server-side request forgery vulnerability in the service. No detailed vulnerability details are available at this time...

How to Configure and Secure Amazon S3

In this article, we’ll dive into some of the workarounds and considerations you may encounter with Amazon S3, since it’s the most used—and misused—cloud storage option on AWS...

Cloud Storage Security: Keeping Malicious Files Out

Discover how to maintain compliance and keep your business safe from malicious files when using Amazon Web Services® AWS instances...

How to Secure AWS Cloud Storage

Discover how to quickly install and integrate Trend Micro Cloud One with Amazon Web Services AWS...

360 Secure Cloud Drive Windows interface version suffers from dll hijacking vulnerability (CNVD-2021-10428)

360 Secure Cloud Disk is a product that provides cloud storage and file sharing services for a wide range of real-name personal and business users. 360 Secure Cloud Disk Windows interface version of the dll hijacking vulnerability, attackers can use the vulnerability to cause the user's computer ...

360 Secure Cloud Drive Windows Interface Version Has a dll Hijacking Vulnerability

360 Secure Cloud Disk is a product that provides cloud storage and file sharing services for a wide range of real-name personal and business users. 360 Secure Cloud Disk Windows interface version of the dll hijacking vulnerability, attackers can use the vulnerability to cause the user's computer ...

SkyCloud disk PC client for windows has dll hijacking vulnerability

Tianyi Cloud Drive is a cloud storage service product launched by China Telecom for individual and family users, positioning itself as a "data center for individuals and families", and providing cloud storage services such as cell phone album backup, multi-end file sharing, family album sharing,...

Cloud Storage Security Keeping You Up at Night?

Malicious files could be lurking in AWS S3 buckets - learn how to stay protected...

ALERT: North Korean hackers targeting South Korea with RokRat Trojan

A North Korean hacking group has been found deploying the RokRat Trojan in a new spear-phishing campaign targeting the South Korean government. Attributing the attack to APT37 aka Starcruft, Ricochet Chollima, or Reaper, Malwarebytes said it identified a malicious document last December that, whe...

Terramaster TOS Security Vulnerability

Terramaster TOS is a Linux-based operating system from Shenzhen, China-based Tumi Electronic Technology Terramaster dedicated to the erraMaster Cloud Storage NAS server. A security vulnerability exists in TerraMaster TOS version 4.2.06 and earlier versions, which can be exploited by an attacker t...

Western Digital My Cloud OS 5 Licensing Issue Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital, Inc. An authorization issue vulnerability exists in versions prior to Western Digital My Cloud OS 5.07.118, which could be exploited by attackers to gain access to the device...

Unauthorized Access Vulnerability in Lenovo Filez Enterprise Web Drive

Lenovo Filez Enterprise Web Disk is an enterprise file collaboration and management platform based on cloud storage. Lenovo Filez Enterprise Nethub has an unauthorized access vulnerability that can be exploited by an attacker to gain unauthorized access to the name of the enterprise, the address ...

File-sharing and cloud storage sites: How safe are they?

There it is again—that annoying message that pops up when your email client informs you that a file is too big to attach. Those of us that are confronted with this problem on a regular basis—and those of us that want to attach files that could get picked up by anti-malware scanners along the...

Cayman Islands Bank Records Exposed in Open Azure Blob

A Cayman Island investment firm has removed years of backups, which up until recently were easily available online thanks to a misconfigured Microsoft Azure blob. The blob’s single URL led to vast stores of files including personal banking information, passport data and even online banking PINs —...

Rclone Security Feature Issue Vulnerability

Rclone is a software from the Rclone team that synchronizes data asynchronously from cloud storage. The software supports Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, Yandex Files and other cloud storage. A security vulnerabilit...

Pharma Giant Pfizer Leaks Customer Prescription Info, Call Transcripts

UPDATE Pharma giant Pfizer has leaked the private medical data of prescription-drug users in the U.S. for months or even years, thanks to an unprotected Google Cloud storage bucket. The exposed data includes phone-call transcripts and personally-identifiable information PII, according to...

Three Cloud-First Akamai Initiatives to Support Your Cloud Journey

61% of organizations plan to focus on cloud migration this year. 93% have a multi-cloud strategy.1 This means that on average your organization is using 2.2 public clouds, multiplying your complexity and your costs. While the cloud has delivered on a lot of promises, it isn't getting simpler or...

SMB cybersecurity posture weakened by COVID-19, Labs report finds

In August, Malwarebytes Labs analyzed the damage caused by COVID-19 to business cybersecurity. Because of immediate, mandated transitions to working from home WFH, businesses across the United States suffered more data breaches, lost more dollars, and increased their overall attack surfaces, all...

CVE-2020-5386

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT Directory Table objects of all internally running services and gain knowledge of sensitive data of the system...