US Plans More Regulations to Improve Cloud Security

[vtqhtr413]

Content source

https://developers.slashdot.org/story/23/03/11/201237/us-plans-more-regulations-to-improve-cloud-security?utm_source=rss1.0mainlinkanon&utm_medium=feed

Among other steps, the Biden administration recently said it will require cloud providers to verify the identity of their users to prevent foreign hackers from renting space on U.S. cloud servers (implementing an idea first introduced in a Trump administration executive order). And last week the administration warned in its national cybersecurity strategy that more cloud regulations are coming — saying it plans to identify and close regulatory gaps over the industry.... So far, cloud providers have haven't done enough to prevent criminal and nation-state hackers from abusing their services to stage attacks within the U.S., officials argued, pointing in particular to the 2020 SolarWinds espionage campaign, in which Russian spooks avoided detection in part by renting servers from Amazon and GoDaddy. For months, they used those to slip unnoticed

US Plans More Regulations to Improve Cloud Security - Slashdot

Politico reports: Governments and businesses have spent two decades rushing to the cloud — trusting some of their most sensitive data to tech giants that promised near-limitless storage, powerful software and the knowhow to keep it safe. Now the White House worries that the cloud is becomin...

developers.slashdot.org

 

[MuzzMelbourne]

Sorry, but isn't an attack more likely to come post-VPN geolocation stuff to mask its origin? Therefore, cloud/server location is moot... IMHO.

 

[ForgottenSeer 98186]

Sorry, but isn't an attack more likely to come post-VPN geolocation stuff to mask its origin? Therefore, cloud/server location is moot... IMHO.

Location matters. Cyber sec effeorts are not being directed at resource locations considered "safe," as was the case in the SolarWinds debacle. There just aren't enough cyber sec resources available to monitor the entire world.

Threat actors very rarely use VPN in their recon, attacks and c&c as it is easy to detect and block VPN traffic.

require cloud providers to verify the identity of their users

Oh there will be lots of whining and complaining about this requirement.