hybrid cloud security

Protecting a modern metropolitan government is no longer just about firewalls and endpoint tools. It is about securing a sprawling mesh of cloud services, legacy IT, operational technology, and remote workers while keeping essential public services available every hour of every day. The City of...

A high‑impact elevation‑of‑privilege flaw has been disclosed in the Azure Connected Machine (Azure Arc) agent that can let an authenticated local user — or an attacker with low‑privileged local execution — escalate to SYSTEM/root on Arc‑enabled servers, and potentially abuse machine identities...

Storm-0501’s latest operation — a hybrid assault that began on-premises, pivoted into Azure, exfiltrated and destroyed cloud data, and culminated in a ransom demand delivered through a compromised Microsoft Teams account — marks a stark turning point in how ransomware actors pursue profit and...

A new wave of cybersecurity urgency is sweeping through IT departments as the Cybersecurity and Infrastructure Security Agency (CISA) issues a fresh, high-severity warning concerning Microsoft Exchange Server. The alert, centered around CVE-2025-53786, underscores a newly disclosed vulnerability...

A new era of cyber resilience for Microsoft 365 environments is taking shape as Sophos and Rubrik unveil a pioneering integrated backup and recovery service. This collaboration, crystallized in the launch of Sophos M365 Backup and Recovery Powered by Rubrik, dramatically elevates data protection...

A new high-severity security flaw in Microsoft Exchange Server hybrid deployments has placed organizations worldwide on high alert, raising the specter of a “total domain compromise” that can cascade from on-premises environments to Microsoft’s cloud. The bug, designated CVE-2025-53786, has not...

A newly revealed security flaw in Microsoft Exchange hybrid configurations has sent ripples of concern through the IT community, as organizations with combined on-premises and cloud email environments are now exposed to invisible privilege escalation attacks. The critical vulnerability...

A new high-severity security vulnerability is causing alarm among businesses that utilize hybrid Microsoft Exchange deployments, as both Microsoft and the US Cybersecurity and Infrastructure Security Agency (CISA) issue urgent advisories. This flaw—affecting Exchange Server 2016, 2019, and the...

A high-severity security vulnerability has emerged at the heart of countless enterprise communications: Microsoft has issued a warning about a flaw in hybrid Exchange Server deployments that could give cyber attackers undetected escalated access to Exchange Online—potentially undermining the...

An alarming new vulnerability in Microsoft Exchange Server hybrid environments has sent shockwaves through the enterprise security landscape, giving attackers with just on-premises admin access the ability to hijack cloud accounts with near-complete impunity. Unveiled at Black Hat 2025 and now...

A critical security update has emerged for organizations leveraging Microsoft Exchange Server in hybrid cloud environments, as CVE-2025-53786 exposes a significant elevation of privilege vulnerability. On April 18th, 2025, Microsoft not only published important security changes for hybrid...

Leveraging trusted internal channels has long been a gold standard for cybercriminals seeking to evade organizational defenses, but a recent campaign uncovered by Proofpoint signals a new level of ingenuity in exploiting a familiar Microsoft 365 feature: Direct Send. This functionality, designed...

Microsegmentation is rapidly emerging as a strategic linchpin within the broader adoption of zero trust architectures (ZTAs), fundamentally reshaping the way organizations across sectors perceive and manage network security. The recent release by the Cybersecurity and Infrastructure Security...

At the heart of modern cybersecurity lies a single, urgent truth: you can’t protect what you can’t see. As digital transformation accelerates globally—and especially in rapidly evolving economies such as Thailand—the volume and velocity of security data have outpaced the architectures of...

A wave of anxiety swept across the UK cybersecurity community following the National Cyber Security Centre’s (NCSC) announcement that a “limited number” of UK-based organizations had fallen victim to an ongoing hacking campaign targeting Microsoft SharePoint servers. The incident, revealed just...

Here’s a comprehensive summary and analysis of the news about Cato Networks’ recent integration: Summary: Cato Networks Enhances SASE Platform with Microsoft Azure vWAN Integration What Happened? Cato Networks, a Secure Access Service Edge (SASE) leader, announced it has integrated its SASE...

Optimal IdM, a prominent provider of Identity and Access Management (IAM) solutions, has recently unveiled a universal Multi-Factor Authentication (MFA) integration tailored for Microsoft Azure tenants. This development signifies a substantial advancement in bolstering security measures for...

As organisations across Australia and globally embrace the cloud to streamline operations and enable seamless collaboration, the question of security has never been more urgent. Cloud platforms like Microsoft 365, Google Workspace, AWS, and Azure have become central to business operations—but so...

An alarming new vulnerability has come to light in Microsoft’s Entra ID, exposing hybrid cloud environments to the risk of privilege escalation attacks that could ultimately hand malicious actors the coveted Global Administrator privileges. This revelation, credited to the security research team...

Microsoft’s latest Patch Tuesday update triggered an unexpected and critical issue for Azure users relying on Virtualisation-Based Security (VBS)—a bug that ultimately prevented certain virtual machines (VMs) from launching at all. In a twist that stymied both IT administrators and cloud...