Database Security

Google Analytics has been found to be in violation of GDPR privacy laws by Italy — the third country to ban it.

After bragging in underground forums, the woman who stole 100 million credit applications from Capital One has been found guilty.

A remote code execution (RCE) vulnerability in all versions of the popular Confluence collaboration platform can be abused in credential harvesting, cyber espionage, and network backdoor attacks.

A brand-new attack vector lays open enterprise data lakes, threatening grave consequences for AI use cases like telesurgery or autonomous cars.

Higher probabilities of attack, soaring ransoms, and less chance of getting data back — the ransomware plague gets worse, and cyber insurance fails to be a panacea.

Study shows more than 97% have exposed assets on AWS — among a wide range of other issues.

Software code pushed to online code repositories exposed twice as many secrets compared to last year, putting organizations' security at risk.

If past is precedent, the cyber impact of the war in Ukraine could be broad and bruising, experts say.

After companies accelerated their adoption of cloud infrastructure, remote workers are now insiders and pose significant risks, and costs, to companies.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Cloud tagging, the process of labeling cloud assets by certain attributes or operational values, can unlock behavioral insights to optimize and automate cyber asset management at scale.

Major cloud providers are vulnerable to exploitation because a single flaw can be turned into a global attack using trusted core services.

Decisions in the UK and Australia, and lawsuits in the United States, could force facial-recognition providers to remove data from their machine-learning models.

Amazon Redshift customers can use Baffle’s Data Privacy Cloud to secure the data pipeline as source data is migrated to Redshift and used for data analytics.

New security tools are proactively protecting APIs built with GraphQL, before attacks against them become more commonplace.