CloudSEK

🏏⚡ Taking it back to the 𝗖𝗹𝗼𝘂𝗱𝗦𝗘𝗞 𝗣𝗿𝗲𝗺𝗶𝗲𝗿 𝗟𝗲𝗮𝗴𝘂𝗲 𝟮𝟬𝟮𝟲—where the big hits were bigger, the close calls were closer, and the cheering never stopped. This is what happens when CloudSters bring their competitive drive off the screen and onto the field. Dive back into the high-octane energy of CPL 2026 below! 👇 #cloudsek #cloudsekpremierleague #cricket

🩺 A medical report should only be seen by two people. The patient and the doctor. 🔓 A large diagnostic service provider inadvertently 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝗔𝗣𝗜 𝗸𝗲𝘆𝘀 𝗮𝗻𝗱 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝘁𝗼𝗸𝗲𝗻𝘀 𝗶𝗻𝘀𝗶𝗱𝗲 𝗮 𝗽𝘂𝗯𝗹𝗶𝗰 𝗝𝗮𝘃𝗮𝗦𝗰𝗿𝗶𝗽𝘁 𝗳𝗶𝗹𝗲, making it possible to access sensitive patient information, including names, phone numbers, addresses, medical reports, and even take over ABHA accounts. This wasn’t just a coding mistake. It 𝘁𝘂𝗿𝗻𝗲𝗱 𝗮 𝗵𝗲𝗮𝗹𝘁𝗵𝗰𝗮𝗿𝗲 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗶𝗻𝘁𝗼 𝗮 𝗴𝗮𝘁𝗲𝘄𝗮𝘆 𝘁𝗼 𝗱𝗲𝗲𝗽𝗹𝘆 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮. 🛡️ 𝗖𝗹𝗼𝘂𝗱𝗦𝗘𝗞'𝘀 𝗕𝗲𝗩𝗶𝗴𝗶𝗹 𝘂𝗻𝗰𝗼𝘃𝗲𝗿𝗲𝗱 𝘁𝗵𝗲 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝘀𝗲𝗰𝗿𝗲𝘁𝘀 before they could be exploited, helping prevent unauthorized access to patient records and healthcare accounts. ⚖️ Because in healthcare, protecting privacy isn't just about compliance. ❤️ It's about protecting people. Learn more about #BeVigil, CloudSEK's External Attack Surface Monitoring (#EASM) solution, here: https://lnkd.in/e9i3SRUM #attacksurfacemonitoring #compliance #hipaa #phi #datasecurity

We are giving away AirPod Max and HomePods to the security community at Black Hat. Part of CloudSEK initiative of giving back to the community and we are at Black Hat. Drop a comment if you are around or the next event you want us to show up.

🚨 An unsecured database isn’t just a misconfiguration. It’s an open invitation. 🔓 𝗠𝗼𝗿𝗲 𝘁𝗵𝗮𝗻 𝟵 𝗺𝗶𝗹𝗹𝗶𝗼𝗻 𝗱𝗮𝘁𝗮𝗯𝗮𝘀𝗲 𝗸𝗲𝘆𝘀 𝘄𝗲𝗿𝗲 𝗹𝗲𝗳𝘁 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝘁𝗵𝗿𝗼𝘂𝗴𝗵 𝗮𝗻 𝘂𝗻𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗲𝗱 𝗥𝗲𝗱𝗶𝗻𝗜𝗻𝘀𝗶𝗴𝗵𝘁 𝗶𝗻𝘀𝘁𝗮𝗻𝗰𝗲, revealing merchant information, payment details, login IDs, secret tokens, and more. ⚠️ Even worse, an attacker could have read, edited, added, or deleted data without authentication. That’s not just a data exposure. It’s the ability to manipulate systems that businesses rely on every day. 🛡️ 𝗖𝗹𝗼𝘂𝗱𝗦𝗘𝗞'𝘀 𝗦𝗩𝗶𝗴𝗶𝗹 𝗶𝗱𝗲𝗻𝘁𝗶𝗳𝗶𝗲𝗱 𝘁𝗵𝗲 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝗥𝗲𝗱𝗶𝘀 𝗶𝗻𝘀𝘁𝗮𝗻𝗰𝗲 through continuous monitoring, helping prevent a simple security oversight from becoming a much larger incident. Because sometimes the biggest risk isn’t sophisticated malware. 💻 It’s a database that was never meant to be public. Learn more about SVigil here: https://lnkd.in/gBV_c83u #tprm #thirdpartyriskmanagement #svigil #ThreatIntelligence #DataSecurity

Hello from cloudsek team Brazil

We welcome Guilherme N. as a Senior Security Consultant at CloudSEK. He'll be serving as a Security Consultant for the LATAM region, delivering client-focused threat intelligence and supporting customers across Latin America by turning findings into actionable insights. Prior to joining CloudSEK, he found Nocera Information Security, serving enterprise and government clients in Brazil, and led penetration testing and AI security research (prompt injection) at Arlequim Technologies. Notably, he bypassed ChatGPT's guardrails during the viral "David Mayer" incident in 2024, and shared his research through TecMundo articles and university talks on red teaming. #welcometotheteam #welcomeonboard #cybersecurity #securityconsulting #cloudster

Every tax season, millions of Indians expect messages about refunds, notices and filing deadlines. Cybercriminals know that too. CloudSEK has uncovered an active campaign where fake Income Tax Department penalty notices are being circulated over WhatsApp and other messaging platforms. Victims are pressured to act within 72 hours, only to end up downloading malware instead of tax documents. But that's just one part of a much larger ecosystem. Our latest threat intelligence report uncovers: • Fake WhatsApp tax notices • Cloned Income Tax e-Filing portals • Credential-stealing malware • Fake refund messages • Fraudulent tax consultants targeting taxpayers Read the full report: https://lnkd.in/gu2qUdmU

A password doesn’t have to be stolen. Sometimes, it’s already waiting on the dark web. CloudSEK’s Xvigil uncovered active login credentials linked to a library management platform, exposed through a massive credential dump shared on a cybercrime forum. The compromised accounts could have provided attackers with access to internal systems, sensitive records, and operational data. This wasn’t just a leaked password. It was a trusted identity waiting to be misused. XVigil continuously monitors the dark web and cybercrime forums to detect exposed credentials early, giving organizations a chance to reset, revoke, and respond before attackers log in. Because the first sign of a breach isn’t always inside your network. Sometimes, it's already being traded online.

It started with a single leaked credential. But what it exposed was far bigger: internal portals, API keys linked to multiple banks, and WhatsApp bot tokens. For threat actors, this is not just leaked data. It is a ready-made map to an organisation’s most critical systems. The consequences could range from unauthorised access and targeted phishing to identity theft and the compromise of sensitive financial infrastructure. CloudSEK’s SVigil detected the exposure through continuous monitoring of the external threat landscape, helping the organisation identify and secure the leaked credentials before they could be exploited. Because major cyber incidents rarely begin with a dramatic breach. Sometimes, they begin with one exposed secret.

France’s cyber threat landscape is changing fast. Underground activity linked to the country has surged more than fourfold in two years, driven by a growing market for stolen credentials, ransomware pressure and geopolitically motivated hacktivism. But the numbers reveal only part of the story. CloudSEK’s latest report examines what is fuelling this rise, which sectors face the greatest exposure and why the threat may remain elevated. Read the full report: https://lnkd.in/gqayG5Y2