Cloud Hosting

After receiving a whole load of negative feedback around an incoming change to OneDrive, Microsoft has reversed direction on the move.

OneDrive users were very unhappy about Microsoft's proposed change to photo storage space (Image Credit: Microsoft)

VIEW GALLERY - 2 IMAGES

The idea was a simple one, but it could have had a major impact on the available storage for photos in the case of some users.

As Neowin spotted (via TechRadar), Microsoft had contacted OneDrive users and told them in an email that: "Soon, data from photos saved in your Gallery and in your albums will each count separately against your total Microsoft storage quota."

You can guess why this wasn't a popular idea, seeing as that it potentially means any given photo could be counted twice (or more) in diminishing your available OneDrive storage - the original pic uploaded (synced) to the Gallery, and then any other copy stuck in an album.

Conceivably, if you have the same photo in multiple albums, what is technically one image could occupy three or four times the space it should, or more.

This new rule was set to come into play next week, but Microsoft has thankfully abandoned the idea.

The software giant informs us:

"This change was scheduled to start rolling out on October 16, 2023. Based on the feedback we received, we have adjusted our approach, we will no longer roll out this update."

That's good news, then, but it was a bit strange that Microsoft even tried to make this change in the first place, as it doesn't make a lot of sense to us, and was clearly going to annoy OneDrive users.

Continued here:
Fury at unpopular OneDrive change causes Microsoft to backtrack on photo storage rules - TweakTown

Arcserve, the worlds most experienced provider of backup, recovery, and immutable storage solutions for unified data resilience against ransomware and disasters, announced it is partnering with WasabiTechnologiesto introduce an integrated total unified data solution package. Exclusively available through Climb Distribution, this offering combines Arcserves robust Unified Data Protection UDP 9.0 and above with Wasabis immutable cloud storage, ensuring a fortified defense against data loss and ransomware threats. It enables channel partners to meet the diverse needs of small and mid-sized businesses seeking comprehensive data protection and seamless cloud storage with the lowest total cost of ownership (TCO.)

Recommended AI News:AGI Will Be Ten Times More Intelligent Than The Sum Total Of All Human Intelligence

By partnering with Wasabi, who has been leading the way in hot, immutable, and high-performance low-cost storage, we help organizations of all sizes achieve a 3-2-1-1 backup strategy for complete and total resiliency against Ransomware attacks or any other disasters that might occur.

Arcserves strategic collaboration with Wasabi addresses a critical industry need, uniting an exceptional data protection solution with cost-effective, high-performance cloud storage. By offering a stackable Arcserve discount in addition to resellers regular discounts, this bundle brings unprecedented value to channel partners.

Key benefits include:

Arcserve and Wasabi represent the next generation of data protection and cloud storage solutions. Our partnership is a testament to our commitment to advancing the industry and meeting channel partners where they are. It equips the channel with the tools to help organizations retain and protect their invaluable data while benefiting from the seamless integration of two industry leaders, said Sam Elbeck, VP of Sales and Partnerships at Arcserve. By partnering with Wasabi, who has been leading the way in hot, immutable, and high-performance low-cost storage, we help organizations of all sizes achieve a 3-2-1-1 backup strategy for complete and total resiliency against Ransomware attacks or any other disasters that might occur.

Recommended AI News:Janover AI Drives Lender Growth on its Fintech Marketplace

Added Laurie Mitchell, SVP of Global Partner Marketing at Wasabi, Arcserve, as a leader in data protection, has been setting industry standards for four decades. Their relentless pursuit of innovation aligns seamlessly with Wasabis next-gen cloud storage solutions. Were not just about eliminating hidden costs like API call and egress fees; were about democratizing data protection. Together, we go beyond only offering storage and data protection; were delivering the channel and our joint customers unparalleled value and peace of mind, all without breaking the bank.

Dale Foster, CEO at Climb Channel Solutions, said, Climb prides itself on being a different breed of distributor, and we are thrilled to be at the intersection of Arcserves unmatched data protection and Wasabis innovative cloud storage. This isnt just another bundle. The collaboration between Arcserve and Wasabi injects new value into the data resilience landscape. With this package, were reengineering the financial logistics of data protection. ROI and reducing cost are crucial, but whats more, is that the added layer of proactive security through Sophos Intercept-X Server makes this solution virtually impenetrable. This collaboration between Arcserve and Wasabi, facilitated by Climb, sets a new standard for businesses seeking a resilient, cost-effective, and secure data protection solution.

Recommended AI News:Janover AI Drives Lender Growth on its Fintech Marketplace

[To share your insights with us, please write tosghosh@martechseries.com]

See the article here:
Arcserve Unveils Comprehensive Data Protection and Cloud ... - AiThority

Cloud misconfigurations have emerged as a major security threat. This led to over 400,000 buckets and 10.4 billion data exposed to the public. Are your sensitive data and personal files truly secure in the cloud? The development of cloud storage has undeniably transformed the way firms protect their digital assets. However, great convenience comes with enormous risk.

In this blog, we will look at the consequences of cloud misconfigurations. Further, we will understand the role of cloud security testing in preventing ransomware attacks.

Organizations seek high availability and performance by transferring their digital assets to cloud storage in todays web-centric environment. One critical issue that is at times missed is the right design of cloud buckets. These buckets store essential corporate assets like private data, sensitive databases, and source codes. While cloud providers ensure the overall safety of these files within their network, users are responsible for configuring access privileges.

Unfortunately, as a result of human error, cloud buckets can become publicly accessible. This potentially leads to the exposing of private data. Cloud storage misconfigurations contributed significantly to 13% of data breaches, according to Verizons 2022 Data Breach Investigations Report. These misconfigurations are used by hackers to gain unauthorized access to buckets containing important information. Such data breach violations have severe consequences and can end in harmful ransomware attacks.

Open-source programs and platforms have further exacerbated the issue of cloud misconfigurations. These platforms allow anyone to scan millions of public buckets simultaneously using certain keywords. The buckets generally follow a common naming convention, making them easily detectable. Hacker utilizes these platforms, such as GrayhatWarfare, to gather information on publicly available buckets for their malicious activities.

The availability of a comprehensive collection of public bucket data in one place serves as an attractive opportunity for threat actors. It becomes a potential focal point for cyberattacks, including ransomware attacks, as threat actors search for vulnerable buckets and exploit them for financial gain.

The consequences of public bucket exposures are broad. The situation becomes worse with the availability of platforms that centralize public bucket searches. While these platforms are meant to raise awareness about the issue, they unintentionally generate resources for threat actors. A recent event involving Microsofts AI research team is an excellent example in point. While sharing an open-source training data bucket on GitHub, they inadvertently exposed 38 terabytes of sensitive data. This vulnerability was caused by an incorrectly set Azure Shared Access Signature (SAS) token during the URL construction procedure.

These bucket discloses have revealed important configuration information and backup disc images. This further poses a substantial risk. When combined with current vulnerabilities, they have the potential to enable additional cyberattacks, including ransomware operations.

Misconfigurations in the cloud can have severe consequences for businesses. This could lead to unauthorized access to sensitive data and data breaches. To limit the risks associated with cloud misconfigurations, organizations must follow guidelines to maintain the security of their digital assets. Some of the key tips and strategies for protecting data are provided below:

Implement robust access control: Properly configure access rights and permissions for cloud storage buckets, ensuring that only authorized individuals or systems have access to sensitive data. Regularly review and update access controls to reflect changes in the organizations structure and personnel.

Follow the principle of least privilege: Grant the minimum level of access necessary to perform the required tasks. Avoid providing unnecessary permissions, as this can increase the risk of data exposure in case of a misconfiguration.

Leverage encryption: Encrypt data stored in the cloud to add an additional layer of security. Encryption ensures that even if unauthorized access occurs, the data remains unintelligible and unusable.

Regularly monitor and audit cloud environments: Implement continuous monitoring and auditing of cloud storage buckets to detect any misconfigurations or unauthorized access promptly. Tools like cloud security modules can provide real-time alerts and insights into potential threats.

Raise employee awareness: Educate employees about the risks of misconfigurations in the cloud and train them on proper security practices. Encourage them to follow best practices and report any suspected misconfigurations or security incidents.

Conduct regular security assessments: Conduct periodic security assessments (cloud penetration testing) of cloud environments to identify potential vulnerabilities and misconfigurations. This can help address any security gaps proactively and prevent future incidents.

Organizations must prioritize cloud security testing to prevent harmful ransomware attacks triggered by cloud misconfigurations. Preventative steps should be taken to discover vulnerabilities in cloud environments and ensure that access rights and permissions are properly configured. Different approaches to security testing, such as black, grey, and white box testing, can help companies improve their security. Continuous monitoring of cloud settings for odd activity and potential security threats is part of a full cloud security testing approach.

In a time where cloud usage is rising in addition to an increasing number of human errors that expand the attack surface, the possibility of cloud misconfigurations and subsequent ransomware attacks remains a significant concern. As companies attempt to preserve their valuable assets and protect against cyber threats, cooperating with a reputable cybersecurity service such as Kratikal becomes ever more essential.

Book a Free Consultation with our Cyber Security Experts

Kratikal, a CERT-In empanelled auditor, provides comprehensive cloud security testing services to enterprises. Our experts tailor VAPT services and Compliance for companies of all scales to ensure overall cyber resilience. Our knowledge of identifying vulnerabilities, establishing access privileges, and conducting regular security audits can assist firms in mitigating the risks associated with misconfigurations in cloud data. Organizations can securely safeguard their data from ransomware attacks. Lets maintain a strong security posture by adopting a proactive approach to cloud security.

Ref: socradar.io/over-400k-buckets-and-104b-files-are-public-due-to-cloud-misconfigurations

The post Cloud Misconfigurations Expose Over 400K Buckets and 10.4B Files to Public Access! appeared first on Kratikal Blogs.

*** This is a Security Bloggers Network syndicated blog from Kratikal Blogs authored by Riddika Grover. Read the original post at: https://kratikal.com/blog/cloud-misconfigurations-expose-400k-buckets-and-10-4b-files-to-public-access/

The rest is here:
Cloud Misconfigurations Expose Over 400K Buckets and 10.4B Files ... - Security Boulevard