Cloud Security

Learn about cloud threats, the latest cloud security technologies, and the leading approaches for protecting data in cloud services.

Cloud Security

PCI Compliance in the Cloud: A Beginner’s Guide

If your organization handles credit or debit card information, you likely need to follow the Payment Card Industry Data Security Standard. PCI DSS is not a government regulation, but since it is required by all the major payment card brands including Visa, MasterCard, and American Express, it carries as much ...

Cloud Security

In Plain Sight: How Hackers Exfiltrate Corporate Data Using Video

Consumers and companies are embracing cloud services because they offer capabilities simply not available with traditional software. Cyber criminals are also beginning to use the cloud because it offers scalability and speed for delivering malware, such as in the recent case of Dyre, which used file sharing services to infect users. ...

Cloud Security

74% of Cloud Services do not Meet European Data Residency Requirements

The European Union (EU) contains 28 countries and it has some of the strongest sets of data protection regulations in the world. These don’t just affect organisations based in Europe, but anyone who deals with PII (personally Identifiable Information) of any citizens of those 28 countries. In this globalised world, ...

Cloud Security

POODLE – How bad is its bite? (Here’s the data)

A major vulnerability affecting the security of cloud services dubbed POODLE (Padding Oracle on Downgraded Legacy Encryption) was reported on October 14th by three Google security researchers—Bodo Moller, Thai Duong, and Krzysztof Kotowicz. Their paper about the vulnerability is available here. What is POODLE? POODLE affects SSLv3 or version 3 of ...

Cloud Security

The 7 Deadly Sins of Cloud Data Loss Prevention

It’s good to learn from your mistakes. It’s even better to learn from the mistakes of others. McAfee (formerly Skyhigh Networks) has some of the security world’s most seasoned data loss prevention (DLP) experts who’ve spent the last decade building DLP solutions and helping customers implement them. So, we thought ...

Cloud Security

McAfee and Palo Alto Networks to Extend Next-Gen Firewall to the Cloud

As part of our mission to help organizations securely enable cloud services, we’ve expanded our range of partnerships beyond cloud service providers to include security solution providers. These strategic partnerships enable joint customers to leverage their investments in security infrastructure as they seek to securely enable cloud services. For this ...

Cloud Security

Dyre Straits: Millions of Cloud Users Vulnerable to New Trojan

A powerful new strain of malware called Dyre (or Dyreza) not only poses a serious threat to consumers and businesses, it also signifies the cloud has arrived. Dyre not only uses the cloud as a vector for distributing malware to client machines, once installed it attempts to compromise data sent ...

Cloud Security

Only 1 in 100 Cloud Providers Meet Proposed EU Data Protection Requirements

Whether your organization is based in Europe, has operations in Europe, or handles data pertaining to EU residents, a proposed EU regulation in the works will have a significant impact on which cloud services you use and how you use them. The EU GDPR (General Data Protection Regulation) is expected to be ...

Cloud Security

The Great Russian Hacker Heist & the “Shadow ID” Problem it Exposed

On Monday the world learned that a small crew of Russian hackers stole 1.2 billion internet passwords. Before digging into what this means to your enterprise’s information security posture, I must first commend Nicole Perloth and David Gelles from the New York Times for their excellent journalism in breaking this ...

Cloud Security

McAfee MVISION Cloud and SafeNet Team Up on Encryption Key Management

More and more organizations have been asking to encrypt their data in business-critical SaaS applications such as Salesforce, ServiceNow, and Microsoft Office 365 with customer-managed keys to ensure compliance and provide additional data protection. Through integration with SafeNet’s leading key management solutions, McAfee now provides a scalable, standards-based solution to meet ...

Subscribe to McAfee Securing Tomorrow Blogs