Cloud Security News this week 09 February 2022 - https://cloudsecuritypodcast.tv/cloud-security-news/

Brought you by JupiterOne - Find out more about them at https://jupiterone.com/csp

• Google Cloud has released the Virtual Machine Threat Detection tool as part of their Security Command Center for Premium customer. According to Google’s blog this “is a first-to-market detection capability from a major cloud provider that provides agentless memory scanning to help detect threats like cryptomining malware inside your virtual machines running in Google Cloud.”  For those familiar with AWS Guardduty, how does this compare - share with us on linkedin, twitter or on our website. You can read Google Cloud’s announcement here.
• Being a Cloud Security Enthusiast, you are probably familiar with the Cloud Security Alliance, they are well known for defining standards, certifications, and best practices for security cloud environments. This week they have released DevSecOps - Pillar 4 Bridging Compliance and Development as part of the DevSecOps Six Pillars series. This document focuses on how compliance can be automated and better relate to security requirements. You can access the full document here. We would love to hear your thoughts about this pillar, so please share your views on www.cloudsecuritypodcast.tv
• Security Researcher Harsh Jaiswal received a bounty award of $17,576 for whats been described as a “pretty simple” but critical SSRF related to HelloSign’s Google Drive Docs export feature.You can read more about the security team’s response here and the vulnerability report here.
• Cloudflare, a Silicon Valley provider of content delivery network (CDN) and DDoS mitigation services has launched a public bug bounty program, further to their invite-only program in place since 2018. You can find out more about the program here
• Tenable, a popular product for vulnerability scanning,  has announced new features to their cloud native application security program, Tenable.cs. You can find our more about tenable and tenable.cs here.
• Amazon GuardDuty now protects Amazon Elastic Kubernetes Service clusters. You can read more about this here

Podcast Twitter - Cloud Security Podcast (@CloudSecPod) Instagram - Cloud Security News