Wiz, a leading provider of cloud security software, is set to become part of Google by May 2026. Alphabet Inc., Google’s parent company, has announced plans to acquire the Israeli-based cloud protection software provider for $32 billion in an all-cash transaction. This acquisition marks a significant move in the tech and cybersecurity sectors.

Once the deal is finalized, Wiz will integrate its suite of security products with Google Cloud, continuing to provide robust security operations across major cloud platforms under its own name. Wiz’s innovative products are designed to protect multiple cloud and code environments, helping to prevent cybersecurity incidents across a wide range of systems.

From a business perspective, this acquisition stands to benefit end users the most, as it will likely reduce the overall cost of cybersecurity, particularly in multi-cloud environments. With businesses increasingly relying on complex cloud infrastructures, ensuring robust security has become more crucial than ever. Wiz’s technology aims to protect valuable digital assets across different cloud platforms, ensuring that companies can operate safely and securely in the cloud.

Interestingly, this deal had been in the works for over a year. Initially, the acquisition was proposed in the summer of the previous year, but Wiz’s CEO, Assaf Rappaport, rejected the deal when it was valued at $23 billion. The higher $32 billion valuation, which includes a $9 billion increase, has convinced the founder to proceed with the acquisition. The deal is now expected to close by mid-2026, highlighting a significant shift in the company’s strategic direction.

In addition to this acquisition, Google has made notable progress in another area of technology. Google CEO Sundar Pichai recently expressed gratitude to SpaceX CEO Elon Musk for the successful launch of the FireSat satellite constellation. This initiative is poised to play a crucial role in early wildfire detection and tracking, a critical aspect of global environmental conservation efforts.

FireSat consists of 50 satellites, all interconnected to use Artificial Intelligence for detecting wildfires as small as 5×5 meters. The ability to quickly spot these fires allows for faster responses, which is vital for minimizing the destruction of ecosystems and wildlife. This technological advancement represents a major step forward in the fight against wildfires and underscores the importance of space-based technologies in tackling environmental challenges. As more such missions are planned, the hope is that we can continue to protect our planet’s flora and fauna, making a meaningful impact on conservation efforts worldwide.

The post Google buys Wiz for $32 billion appeared first on Cybersecurity Insiders.

from Cybersecurity Insiders https://ift.tt/2ScpLvo
via IFTTT

Cloud storage has become an essential tool for businesses and individuals alike to store vast amounts of data, ranging from documents and media to highly sensitive corporate information. However, as businesses increasingly move critical data to the cloud, they also expose themselves to the growing risk of cyber threats, particularly ransomware attacks. According to a recent study by Palo Alto Networks‘ Unit 42 Threat Intelligence, a staggering 66% of cloud-stored data is vulnerable to these types of attacks. In a ransomware attack, hackers typically infiltrate the cloud system, steal a portion of the data, and then lock the remaining data using encryption. The data is rendered inaccessible until the victim agrees to pay a ransom.

This disturbing statistic was further highlighted in a report from the SANS Institute, which sheds light on the significant cybersecurity vulnerabilities in cloud environments. The SANS Institute’s research reveals that many businesses and individuals fail to implement the necessary security measures to protect their data. A key reason for this is that users often rely on default cloud settings, which offer minimal protection against sophisticated cyberattacks. Default configurations and basic security practices simply aren’t enough to defend against hackers who have become increasingly adept at exploiting weaknesses in cloud storage systems.

While these findings are concerning, it is important to understand that the responsibility for securing data in the cloud is not solely on the cloud storage provider. Cloud Storage Providers (CSPs) do offer security features and controls, but the level of protection provided ultimately depends on how effectively users implement and manage these tools. CSPs generally provide a range of security measures, such as encryption, access controls, and monitoring tools, to help safeguard user data. However, these features need to be configured properly to be effective. It is up to the cloud service user to take full advantage of these tools and ensure that they are using them to their full potential.

One key point to remember is that most cloud services are billed on a pay-per-use basis. This means that users are paying for the storage and resources they use, but it also places the responsibility on them to ensure that they are utilizing the available features to protect their data. As cloud services grow in complexity and sophistication, so too does the range of security controls available to users. However, if users continue to rely on default configurations and neglect to follow best practices for cloud security, their data remains vulnerable to various types of cyberattacks, including ransomware.

To mitigate the risk of ransomware and other cyber threats, users must take proactive steps to enhance their cloud security. This includes adjusting default settings, implementing strong encryption protocols, and managing access permissions carefully. Additionally, users should regularly audit their cloud storage for any potential vulnerabilities and ensure that all security patches and updates are applied promptly. Security training for employees and a clear security policy should also be part of any company’s approach to managing data in the cloud.

Furthermore, many CSPs provide specific guidelines on how to secure data within their cloud environments. These guidelines often cover topics like identity management, encryption practices, and how to configure security features such as firewalls, multi-factor authentication, and intrusion detection systems. It is critical for businesses to follow these best practices and align their security strategies with the provider’s recommendations to ensure comprehensive protection.

In conclusion, while cloud storage offers tremendous convenience and scalability, it is also a prime target for cybercriminals. The onus of securing sensitive data in the cloud ultimately falls on the user. By understanding the security tools available through their cloud provider, following industry best practices, and regularly auditing their security posture, businesses and individuals can significantly reduce the risk of ransomware attacks and other security threats. As cloud storage continues to play an integral role in data management, it is more important than ever to stay vigilant and proactive about data security.

The post Cloud Storage buckets holding sensitive information vulnerable to ransomware attacks appeared first on Cybersecurity Insiders.

from Cybersecurity Insiders https://ift.tt/P1AdDG7
via IFTTT

Frankfurt am Main, Germany, March 17th, 2025, CyberNewsWire

Cyberattacks are no longer an abstract threat – they dominate risk planning for companies worldwide. The latest Link11 European Cyber Report shows an alarming trend: the number of DDoS attacks has more than doubled, and they are shorter, more targeted, and more technically sophisticated. Organizations that do not continuously evolve their security strategies face significant financial losses and long-term reputational damage.

 The numbers speak for themselves:

•  137% more DDoS attacks on the Link11 network compared to last year.
• A new scale has been reached: The largest attack measured to date was 1.4 terabits per second (Tbps).
• Attacks are shorter and highly effective: Two-thirds of all attacks peaked in just 10 to 60 seconds.
• Multi-vector attacks are setting new standards: The combination of different attack vectors makes defense more difficult and requires more precise protection.

Why organizations should act now

The Allianz Risk Barometer 2025 highlights that while digital transformation presents new opportunities, it also expands the attack surface for cyber threats. Cybercriminals are leveraging powerful botnets and increasingly sophisticated attack techniques, accelerating the speed and impact of DDoS attacks. A recent case demonstrates how these evolving threats are testing the resilience of organizations.

Multi-vector DDoS: When Network Load Meets Application Attacks

A four-day attack combined Layer 3/4 and Layer 7 techniques, putting both infrastructure and web applications under massive pressure. Link11 recorded a total of 120 million requests, resulting in more than a million WAF logs – a load that quickly overwhelmed conventional defenses.

The attackers’ strategic approach was particularly striking:

• Layer 3/4 attacks: Massive data streams overwhelm the network infrastructure.
• Layer 7 attacks: APIs and web applications were deliberately crippled with complex queries.
• Dynamic attack patterns: Attacks were launched in waves to test the response times of defenses.

Organizations that do not continuously adapt their IT security strategy risk becoming victims of targeted attacks. Web applications and APIs are particularly targeted by cybercriminals because they often handle sensitive data and control critical business processes.

Modern security architecture is the key to resilience

The incident underscores the growing limitations of traditional DDoS defenses, emphasizing the need for more adaptive mitigation strategies. Enterprises are increasingly turning to AI-powered systems for real-time threat detection and attack prevention. Additionally, Web Application and API (WAAP) protection is gaining importance as attackers continue to exploit this critical attack vector.

 Combining advanced protection solutions:

• AI-based attack detection for early detection of suspicious patterns
• Bot management to block automated attacks
• Adaptive WAF systems that adapt in real time

A holistic security strategy combines advanced DDoS mitigation, continuous monitoring, and adaptive protection mechanisms. “The increasing number of DDoS attacks shows that cybercriminals continue to rely on this proven method. However, the shortened attack time does not mean that the threat is decreasing – on the contrary: companies need to react faster and further optimize their defense mechanisms,” said Jens-Philipp Jung, CEO of Link11.

The full European Cyber Report 2025 can be downloaded here.

About Link11

Link11 is a specialized global IT security provider and protects infrastructures and web applications from cyberattacks. Its cloud-based IT security solutions help companies worldwide to strengthen the cyber resilience of their networks and critical applications and avoid business disruption. Link11 is a BSI-qualified provider for DDoS protection of critical infrastructure. With ISO 27001 certification, the company meets the highest standards in data security.

Contact

Corporate Communications
Lisa Froehlich
Link11 GmbH
l.froehlich@link11.com
+49 16098088442

The post European Cyber Report 2025: 137% more DDoS attacks than last year – what companies need to know appeared first on Cybersecurity Insiders.

from Cybersecurity Insiders https://ift.tt/oqGCXJf
via IFTTT