Skip to main content

Cloud Technology and Security Alert News Digest – Issue #14

Update 2019: We’ve been busy working on some great training content around security, check out the Cloud Academy library to prepare on all-things cloud security.


Privacy and Security in the Cloud

Welcome to the Cloud Technology and Security Alert News Digest. This week we’ve got Microsoft on privacy and security, IBM on storage, Google on testing Compute Engine apps for security flaws and the United States government on accessing the world’s storage drives.

How the “Equation Group” hacked everything

Ars Technica has published an in-depth narrative of the US government’s National Security Agency (NSA)’s fourteen-year program – dubbed the “Equation Group” – to exploit incredibly elusive vulnerabilities in consumer storage media to gather data from millions of targets. Whatever you feel about governments holding these kinds of powers, the descriptions of their effort, and of Kaspersky Labs’ work to figure it all out, are fascinating.

Microsoft and customer data privacy

Microsoft, perhaps sensitive to customer concerns about recent US government demands for access to private data stored in on Microsoft servers, has announced that it is joining the international standard for cloud privacy, ISO/IEC 27018. The initiative seeks to standardize controls and guidelines for the protection of personally identifiable information in the public cloud environment. As cloudtech reports, Azure, Office 365 and Dynamics CRM Online products are all, according to Microsoft, currently in compliance.

Software-defined storage is the best thing since…the next best thing?

James Bourne at cloudtech (briefly) reports on some reactions to IBM’s recent announcement of $1bn of funding for their new IBM Spectrum Storage service.

Spectrum Storage will offer software-defined storage that permits greater platform integration, elasticity, and options for hybrid storage solutions. However, some critics write Bourne, feel that storage as always been software-defined, but that growing levels of software abstraction can actually obstruct access and performance.

Password-free at last?

Microsoft, according to ZDNet, has plans to support password-free access to online data, using multi-factor authentication based on face, voice, iris, and fingerprint recognition or dongles instead of perennially weak and misused passwords. Microsoft’s support for the Fast Identity Online (Fido) standard will come with Windows 10 and will work with Azure Active Directory authentication.

Security Botnets as a Service

Zack Whittaker at ZDNet reports that Google is testing a botnet-based service that will scan developer applications hosted on the Google Compute Engine for common vulnerabilities. The service will look for cross-site scripting (XSS) issues and mixed content.

Avatar

Written by

David Clinton

A Linux system administrator with twenty years' experience as a high school teacher, David has been around the industry long enough to have witnessed decades of technology trend predictions; most of them turning out to be dead wrong.

Related Posts

Avatar
Guy Hummel
— June 6, 2019

How to Become a Microsoft Certified Azure Administrator

Microsoft Azure is one of the hottest cloud services on the planet, and it’s growing at a phenomenal rate. This rapid growth has created a huge demand for people who know how to administer and manage Azure implementations.To make it easier for employers to verify the skills of Azure...

Read more
  • Azure
  • exam
Avatar
Guy Hummel
— May 20, 2019

Preparing for the Microsoft AZ-900 Exam

Microsoft has offered Azure certification exams for years, but until recently, they were all meant for technical IT professionals. Now non-technical professionals, such as salespeople and managers, can take the new AZ-900 exam to prove their understanding of Azure fundamentals. People w...

Read more
  • Azure
Avatar
Thomas Mitchell
— May 16, 2019

An Overview of Azure Storage (Part 2)

Archive StorageArchive Storage offers the lowest storage costs of all Azure storage. Its retrieval costs, however, are higher when compared to Hot and Cool storage. The archive tier of storage is designed for data that can tolerate several hours of latency when being retrieved. It’s a...

Read more
  • Azure
  • Storage
Avatar
Thomas Mitchell
— May 14, 2019

An Overview of Azure Storage (Part 1)

Welcome to part one of our series on Azure Storage. Stay tuned for the second part. An Overview of Azure StorageMicrosoft Azure Storage is a cloud-based storage offering that provides multiple storage solutions for organizations. In addition to a massively scalable object store for ...

Read more
  • Azure
  • Storage
Avatar
Giacomo Marinangeli
— March 29, 2019

NEW: Custom Hands-On Labs for Azure and Google Cloud Platform

Harvard Business Review recently estimated that some 90% of corporate training never gets applied on the job. Given the $200B training industry, that is a staggering amount of waste. One reason for the disconnect? Lack of context.Cloud Academy’s platform was built to make it extraor...

Read more
  • Azure
  • Content Engine
  • Google Cloud Platform
  • Hands-on Labs
Avatar
Guy Hummel
— March 28, 2019

How to Become a Microsoft Certified Azure Solutions Architect

Microsoft Azure is the fastest growing cloud provider. Azure’s revenue grew an incredible 76% in the last quarter of 2018. As more and more businesses move their IT infrastructure to Microsoft’s cloud platform, the demand for Azure professionals keeps rising. Since there are relatively ...

Read more
  • Azure
Avatar
Nitheesh Poojary
— March 20, 2019

What is Heroku? Getting Started with PaaS Development

So just what is Heroku? It's a service for developers eager to get their applications online without having to worry about infrastructure details.Metered, pay-as-you-go Cloud Computing services come in all kinds of flavors. Infrastructure as a Service (IaaS) offerings like AWS allow e...

Read more
  • Azure
  • Development & Deploy
Avatar
Nitheesh Poojary
— March 12, 2019

Understanding Object Storage and Block Storage Use Cases

Cloud Computing, like any computing, is a combination of CPU, memory, networking, and storage. Infrastructure as a Service (IaaS) platforms allow you to store your data in either Block Storage or Object Storage formats.Understanding the differences between these two formats - and how ...

Read more
  • Azure
  • Storage
Avatar
Thomas Mitchell
— January 29, 2019

What are Azure Blueprints?

What are Azure Blueprints?Blueprints, in the traditional sense, are used by architects and engineers to design and build new things.  They are used to ensure that the final products are built to specifications and in compliance with certain standards and requirements.Azure Bluepri...

Read more
  • Azure
  • Blueprints
Avatar
Thomas Mitchell
— January 22, 2019

Azure Hybrid Identity Authentication Methods

The move to the cloud is picking up steam.  As such, many corporations are beginning to find themselves supporting a mixture of on-prem apps as well as cloud apps. Users are finding that they need access to this mix of applications as well.  As one would expect, this can become a challe...

Read more
  • Azure
  • Hybrid Cloud
  • Hybrid Identity
Avatar
Andrew Larkin
— January 15, 2019

2018 Was a Big Year for Content at Cloud Academy

As Head of Content at Cloud Academy I work closely with our customers and my domain leads to prioritize quarterly content plans that will achieve the best outcomes for our customers.We started 2018 with two content objectives: To show customer teams how to use Cloud Services to solv...

Read more
  • AWS
  • Azure
  • Cloud Computing
  • Google Cloud Platform
Avatar
Dwayne Monroe
— December 17, 2018

Azure Internet of Things (Azure IoT) – An Introduction

IoT, or the ‘Internet of Things’, is an intriguing and rapidly growing technology that's bringing significant change to important elements of modern life. According to Gartner, IoT security spending alone is set to reach $1.5 billion during 2018.Like many newly minted terms, the def...

Read more
  • Azure
  • IoT