Feed aggregator

Multiple important refinance rates have decreased. Refinancing makes sense if you can get a lower interest rate on your home loan.

Quite a few key mortgage rates are seeing dips. Will rates continue to trend downward in 2024?

A few simple fridge organisation tweaks can make a huge difference not just to your cooking repertoire, but to your lifestyle too. They can help you make better and more interesting food choices, and they can also help reduce your stress levels when you're looking for something quick and easy to eat for you, your family or your friends.

It can also help the planet, and your pocket. That's because around 19% of all food in the world is thrown away uneaten. Across Europe, a significant portion of food waste comes from households—often because we buy too much or forget what’s tucked away in the fridge, hidden behind other items.

(Image credit: TCL)

Is it time for a fridge upgrade? For many kitchens the answer is an enthusiastic yes, because if your fridge is working efficiently, organised smartly and suits your specific needs it can reduce food waste, save you money and encourage you to eat better too. If opening your fridge is more of a pain than a pleasure, TCL have some really smart ideas for every kind of kitchen and every kind of cook.

The technology of tasty

When you choose a TCL fridge you're benefiting from the technology of tasty: cutting-edge tech that doesn't just keep your cucumbers cool but can also keep food fresher for longer and cut down on food waste too.

(Image credit: TCL)

Say hello to the TCL Free Built-In refrigerator. Designed with a 90° opening door and stable recessed hinges, ensuring easy access even when positioned against a wall. TCL's innovative bottom heat dissipation system minimises the required side clearance from 10 cm to just 1 cm by enabling heat exchange at the base. Furthermore, the 4th generation microporous foaming agent reduces the insulation layer's thickness by 10%, maximising internal storage capacity.

(Image credit: TCL)

The TCL Free Built-In refrigerator seamlessly combines style and functionality with an XL capacity, perfect for busy families and cooking enthusiasts. Its spacious design keeps fresh food within easy reach, while customizable compartments adapt effortlessly to your grocery needs, making organization simple. The large-capacity drawer for easy access to ingredients of all sizes. Its smooth slide-out design ensures clear visibility, keeping everything from small spices to large items neatly stored and easily accessible.

Whether hosting a gathering or managing everyday essentials, this fridge’s smart storage solutions keep your kitchen organized and your food fresh, making life more efficient and enjoyable.

(Image credit: TCL)

There are two key features that do that in the TCL Free Built-In refrigerator: T-Fresh, and T-Temp. Now in its fourth generation, T-Fresh is industry-leading sterilisation that delivers comprehensive protection, preventing the formulation of 99.99%* of the bacteria that can make your food lose its freshness and eliminating unwanted odours too.

T-Temp is just as useful. It enables you to easily adjust the temperature for different kinds of food, with adjustable temperature settings of -3°C, -1°C, and 4°C, ensuring optimal storage conditions for a variety of foods.

While T-Fresh and T-Temp are the stars here, there's another clever bit of tech inside TCL's fridges: Pure Air. That's a smart air circulation system that effectively maintains a fresh and odour-free environment within your freezer.

The Cleverest Combi

The TCL Combi Fridge is designed to simplify and improve your every day. With flexible storage options including a bottle rack and shelf, flexible balcony and impressively large storage space, the Combi Fridge adapts effortlessly to your specific needs whether you're storing large items or want access to frequently used ingredients – or both.

(Image credit: TCL)

Like its Built-In sibling, the TCL Combi Fridge has TCL's clever T-Temp technology to keep your food fresher for longer by regulating temperature and humidity levels. And it can help with your utility bills too thanks to its environmentally friendly inverter technology, which makes it the smart choice for eco-conscious homes. And with a 10-year warranty** on its compressor, it delivers peace of mind too.

How can TCL help bring more order to your kitchen?

(Image credit: TCL)

If your existing fridge seems to be taking up loads of room without delivering lots of storage space inside it, the TCL Free Built-In refrigerator series will be a breath of air that's as fresh as the food inside it. That's because the Free Built-In Fridge Series is a clever addition to any kitchen. They're designed to fit seamlessly into any space, enhancing your kitchen's aesthetic appeal while maximising space efficiency too. They're made to suit your specific kitchen, and that means they can go wherever suits you: against the wall, next to a cabinet or freestanding.

The TCL Free Built-In refrigerator features a sleek, integrated design that seamlessly fits into your cabinetry, elevating your kitchen's aesthetic while optimising space efficiency. Its flush, built-in appearance creates a cohesive and clutter-free look that’s both functional and stylish. Designed for versatility, the Free Built-In design adapts effortlessly to various kitchen layouts—whether placed against a wall, beside a cabinet, freestanding, or fully integrated.

That's not all. The fridge compartments are customisable, enabling you to keep everything organised and making it all incredibly easy to access. And the brilliant large-capacity drawer can accommodate every kind of ingredient while making it super-easy to find everything from small spices to giant joints.

The customizable design of TCL's Free Built-In refrigerator offers unmatched convenience and practicality. Its ample capacity and flexible compartments prevent the frustration of cramming a large shop into a small space, making it easier to see and access everything—no more forgotten ingredients lurking at the back. This same thoughtful design extends to the TCL Combi Fridge, which features customizable compartments, reversible glass shelves, versatile racking, and flexible door balconies, making organization effortless. Plus, its Humidity Side Crisper keeps produce crisp and fresh, ensuring your lettuce stays crunchy and ready to enjoy.

(Image credit: TCL)

Whether you fancy the freestanding Combi Fridge or would prefer the flexibility of the TCL Free Built-In refrigerator series, TCL delivers exceptional cooling, massive storage space and all kinds of clever features to make every day easier. Click here to find out more about the technology of tasty.

* 99.99% from BV report. Tested bacteria represented were Staphylococcus aureus and Escherichia coli.

***The inverter compressor's 10 years warranty need to be registered on TCL official website within 30 days of purchase.

Product models, capacities, and appearances are subject to the actual market availability in each region. For specific details, please refer to local retailers or the official website.

Warehouses full of servers are hungry for power, no matter who supplies it.

Two men were arrested in Boston on Saturday for allegedly operating a drone "dangerously close" to Logan International Airport, police said.

(Image credit: Rodrique Ngowi)

Israel said Sunday it will close its embassy in Ireland as relations deteriorated over the war in Gaza, where Palestinian medical officials said new Israeli airstrikes killed over 46 people including several children.

(Image credit: Tsafrir Abayov)

Here are the answers for The New York Times Mini Crossword for Dec. 16.

Here are some hints -- and the answers -- for the Dec. 16 Strands puzzle, No. 288.

Here are some hints — and the answers — for Connections No. 554 for Dec. 16.

Here are some hints and the answer for Wordle No. 1,276 for Dec. 16.

Here are some hints — and the answers — for Connections: Sports Edition No. 84 for Dec. 16.

• Streamlined 3D printing process reduces downtime for multiple buildings
• Eco-friendly construction using 99% locally sourced materials
• Modular design allows customization for diverse project needs

As global demand for housing and infrastructure grows, traditional construction methods often struggle to keep pace. However, the rise of 3D printing technology is set to transform the sector by enabling faster, more cost-effective, and eco-friendly building processes.

COBOD International, which has over 80 3D construction printing operations worldwide, says it has taken a significant leap forward with the launch of its BOD3 3D Construction Printer.

The company says BOD3 is its most advanced 3D construction printer to date, being designed to print with real concrete, and also introducing features which promise to enhance efficiency, reduce costs, and streamline the construction of low-rise buildings across various settings.

A new benchmark in 3D construction printing

The BOD3 has already been deployed globally, with operational units in countries such as Indonesia, Angola, and Bahrain, with these early implementations reducing downtime between projects and speeding up construction times, meaning the printer can handle high-volume construction projects.

BOD3 comes with an advanced, extendable ground-based track system which allows the printer to operate continuously along the Y-axis, meaning it can print multiple buildings one after another without the need for reinstallation, reducing setup time and making the printer highly efficient for large-scale construction sites where multiple structures need to be erected.

This new model comes with a modular design, allowing it to be customized to the specific needs of different construction projects. The BOD3 comes equipped with an operational stand that allows operators to control and monitor the 3D printer and its supplementary equipment through a single, integrated system. It also has a Universal X-Carriage for the integration of additional tools such as those for insulation, painting, and sanding.

This printer also comes with an Advanced House Management System (AHMS) which minimizes the need for manual labour by ensuring a smooth material flow via secured hoses, enhancing the overall efficiency of the construction process.

According to the company, BOD3 can print with 99% locally sourced materials, reducing the need for transporting expensive and environmentally costly resources. In partnership with Cemex, COBOD has also developed the D.fab solution, which allows traditional concrete to be adapted for 3D printing. This reduces the amount of binder required, making the construction process faster and eco-friendly.

"The global housing crisis demands a more efficient construction solution that is faster, more efficient, and scalable. The BOD3 is our answer to this challenge. Drawing on years of research and expertise, we’ve designed the BOD3 with innovative features, making it our most cost-effective and efficient model yet for multiple low-rise buildings," said Henrik Lund-Nielsen, Founder and General Manager of COBOD.

"Its design supports high-volume, linear production of houses, enabling mass production without compromising quality. The fact that six units have already been sold before its official launch speaks volumes about the BOD3’s market demand and the trust our customers place in our technology.”

You might also like

• These are the best printers
• Take a look at the best business VPNs
• Hybrid work is winning out, despite employers trying to force a return to office

Clusters of drones have been reported flying over at least six states. The Biden administration is pushing Congress to pass legislation that would expand counter-drone authorities.

(Image credit: Kent Nishimura)

This holiday season, gift the tea lovers in your life some high-quality teas from around the world through these tea clubs and subscriptions.

Hussain's career spanned over five decades, during which he was revered as both a national treasure in India and admired worldwide.

(Image credit: Manjunath Kiran)

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,000 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today – or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1057) - hint #1 - Vowels How many different vowels are in Quordle today?

• The number of different vowels in Quordle today is 4*.

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1057) - hint #2 - repeated letters Do any of today's Quordle answers contain repeated letters?

• The number of Quordle answers containing a repeated letter today is 0.

Quordle today (game #1057) - hint #3 - uncommon letters Do the letters Q, Z, X or J appear in Quordle today?

• No. None of Q, Z, X or J appear among today's Quordle answers.

Quordle today (game #1057) - hint #4 - starting letters (1) Do any of today's Quordle puzzles start with the same letter?

• The number of today's Quordle answers starting with the same letter is 2.

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1057) - hint #5 - starting letters (2) What letters do today's Quordle answers start with?

• H

• C

• C

• S

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1057) - the answers

(Image credit: Merriam-Webster)

The answers to today's Quordle, game #1057, are…

• HYDRO
• CREAM
• CHIDE
• SLIME

Renewable energy, CBD, analytics, online gambling, true crime podcasts, AI… the 21st century has seen many boom industries. Among them, the most unexpected and niche of them all (not even AI could have predicted it), is SLIME.

In the last century, Slime was a forfeit poured over the top of people’s heads in TV game shows or used for pranks. Today it’s evolved into a multi-billion dollar sector, with businesses and entrepreneurs stretching (and oozing) the boundaries of stuff you can put your fingers in.

These are complicated times and Slime is pure chemical fun, I mean it’s better than putting your hands in a tub of CREAM but I’d never CHIDE anyone for their hobbies.

How did you do today? Send me an email and let me know.

Daily Sequence today (game #1057) - the answers

(Image credit: Merriam-Webster)

The answers to today's Quordle Daily Sequence, game #1057, are…

• EGRET
• TOUCH
• EQUIP
• AGATE

Quordle answers: The past 20

• Quordle #1056, Sunday 15 December: DROVE, STILT, LINEN, GIANT
• Quordle #1055, Saturday 14 December: SPIEL, ONSET, TIGER, DITTO
• Quordle #1054, Friday 13 December: ERECT, REBAR, MOIST, IDIOM
• Quordle #1053, Thursday 12 December: MILKY, CRIER, STORK, DRIER
• Quordle #1052, Wednesday 11 December: BRIAR, NASAL, SHARD, FLUFF
• Quordle #1051, Tuesday 10 December: BEGAN, TRIAL, IDEAL, GUIDE
• Quordle #1050, Monday 9 December: TITAN, FORTE, SPEED, BRIAR
• Quordle #1049, Sunday 8 December: BUNCH, SHINY, MOULT, INTRO
• Quordle #1048, Saturday 7 December: SHAKY, CROOK, GHOUL, VERSE
• Quordle #1047, Friday 6 December: BRAWL, UNTIL, DOWRY, STING
• Quordle #1046, Thursday 5 December: AGING, BICEP, CLOVE, SPILL
• Quordle #1045, Wednesday 4 December: JUDGE, GIVER, GNASH, CLOAK
• Quordle #1044, Tuesday 3 December: FUDGE, THICK, CRANK, STASH
• Quordle #1043, Monday 2 December: TROPE, HOVER, SAUNA, SHAPE
• Quordle #1042, Sunday 1 December: NAIVE, CIRCA, STEAD, MICRO
• Quordle #1041, Saturday 30 November: MAMMA, SNUCK, CRYPT, TAROT
• Quordle #1040, Friday 29 November: JOIST, DROOL, DUSKY, GLIDE
• Quordle #1039, Thursday 28 November: GRADE, WORRY, NOISE, DAISY
• Quordle #1038, Wednesday 27 November: HEART, ROGUE, INEPT, UTILE
• Quordle #1037, Tuesday 26 November: PRIED, FAINT, HURRY, WOOER

Good morning! Let's play Connections, the NYT's clever word game that challenges you to group answers in various categories. It can be tough, so read on if you need clues.

What should you do once you've finished? Why, play some more word games of course. I've also got daily Strands hints and answers and Quordle hints and answers articles if you need help for those too, while Marc's Wordle today page covers the original viral word game.

SPOILER WARNING: Information about NYT Connections today is below, so don't read on if you don't want to know the answers.

NYT Connections today (game #554) - today's words

(Image credit: New York Times)

Today's NYT Connections words are…

• LIGHT BULB
• SNOWBALL
• HAM
• CHICKEN
• PILLOW
• YODEL
• BAR
• FOOD
• KNOCK-KNOCK
• WALKIE-TALKIE
• DING DONG
• WATER BALLOON
• SATELLITE
• DEVIL DOG
• AM
• HOHO

NYT Connections today (game #554) - hint #1 - group hints

What are some clues for today's NYT Connections groups?

• YELLOW: Listening 
• GREEN: Fun scraps
• BLUE: Sweet treats
• PURPLE: Typical gags

Need more clues?

We're firmly in spoiler territory now, but read on if you want to know what the four theme answers are for today's NYT Connections puzzles…

NYT Connections today (game #554) - hint #2 - group answers

What are the answers for today's NYT Connections groups?

• YELLOW: TYPES OF RADIO
• GREEN: KINDS OF PLAY FIGHTS
• BLUE: SNACK CAKES
• PURPLE: CLASSIC JOKE STAPLES

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Connections today (game #554) - the answers

(Image credit: New York Times)

The answers to today's Connections, game #554, are…

• YELLOW: TYPES OF RADIO AM, HAM, SATELLITE, WALKIE-TALKIE
• GREEN: KINDS OF PLAY FIGHTS FOOD, PILLOW, SNOWBALL, WATER BALLOON
• BLUE: SNACK CAKES DEVIL DOG, DING DONG, HOHO, YODEL
• PURPLE: CLASSIC JOKE STAPLES BAR, CHICKEN, KNOCK-KNOCK, LIGHT BULB

• My rating: Moderate
• My score: 3 mistakes

A Connections word walks into a bar.

The barman says: “Sorry we don’t serve your type here.”

I struggled with blue today. I knew DEVIL DOGS were a type of cake, but I couldn’t think of the other two until a vague memory of a Simpsons episode came to mind – one where Homer has to choose between a winning lottery ticket or a YODEL and choses a Yodel. Mmm… Yodels.

This LIGHT BULB moment got me over the line on my final guess.

Yesterday's NYT Connections answers (Sunday, 15 December, game #553)

• YELLOW: SPICES CLOVE, MACE, NUTMEG, PEPPER
• GREEN: PERFORM POORLY FLAIL, FLOP, FLOUNDER, TANK
• BLUE: SKIM THROUGH, AS PAGES FLIP, LEAF, RIFFLE, THUMB
• PURPLE: POP SINGERS MINUS "S" KEY, MAR, SPEAR, STYLE

What is NYT Connections?

NYT Connections is one of several increasingly popular word games made by the New York Times. It challenges you to find groups of four items that share something in common, and each group has a different difficulty level: green is easy, yellow a little harder, blue often quite tough and purple usually very difficult.

On the plus side, you don't technically need to solve the final one, as you'll be able to answer that one by a process of elimination. What's more, you can make up to four mistakes, which gives you a little bit of breathing room.

It's a little more involved than something like Wordle, however, and there are plenty of opportunities for the game to trip you up with tricks. For instance, watch out for homophones and other word games that could disguise the answers.

It's playable for free via the NYT Games site on desktop or mobile.

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #288) - hint #1 - today's theme What is the theme of today's NYT Strands?

• Today's NYT Strands theme is… Crossed words

NYT Strands today (game #288) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• SURE
• MATES
• TANK
• RATHER
• HURT
• NEAT

NYT Strands today (game #288) - hint #3 - spangram What is a hint for today's spangram?

• Word smash

NYT Strands today (game #288) - hint #4 - spangram position What are two sides of the board that today's spangram touches?

First side: top, 4th column

Last side: bottom, 4th column

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #288) - the answers

(Image credit: New York Times)

The answers to today's Strands, game #288, are…

• SMOG
• SPORT
• BRUNCH
• ZORSE
• ATHLEISURE
• ANKLET
• SPANGRAM: PORTMANTEAUX

• My rating: Moderate
• My score: 2 hints

In honor of today’s Spangram I’ve invented my own portmanteaux. Stranesia describes that moment playing Strands where your memory and brain power completely evade you. Today, I experienced this all-too-common sensation when, even though I only had five letters left, I still could not get the final word and was left dumbfounded.

In my defense, ZORSE is hardly the most common of words. But then again, none of my numerous attempts (Orzes – zesty Oreos?, etc) made any sense either.

According to Google, there are only around 100 Zorses (a hybrid between zebra and horse) in the world. Several years ago one breeder called the zorse "the horse of the future". But there is one hitch – zorses cannot breed, making their future bleak.

Zorse is also rumored to be the name of a puzzle game that the NYT has been testing, so this portmanteaux business could be a cunning bit of marketing. Zorse: the puzzle of the future. Or maybe it doesn't exist at all.

How did you do today? Send me an email and let me know.

Yesterday's NYT Strands answers (Sunday, 15 December, game #287)

• FULL
• WANING
• WAXING
• GIBBOUS
• QUARTER
• CRESCENT
• SPANGRAM: LUNAR PHASE

What is NYT Strands?

Strands is the NYT's new word game, following Wordle and Connections. It's now out of beta so is a fully fledged member of the NYT's games stable and can be played on the NYT Games site on desktop or mobile.

I've got a full guide to how to play NYT Strands, complete with tips for solving it, so check that out if you're struggling to beat it each day.

• Ransomware attacks often now target backup data directly, experts warn
• Zero Trust principles are key to data protection
• 59% of organizations experienced ransomware attacks in 2023

Ransomware attacks have increasingly become a top concern for businesses worldwide, targeting organizations of all sizes and industries.

Recent research by Object First has highlighted key vulnerabilities and the growing importance of modern backup technologies in combating ransomware threats.

The survey revealed many businesses are still using outdated technologies that leave their backup data vulnerable to attack, suggesting they are not yet adequately prepared to fend off modern ransomware attacks.

The state of backup security

Backup data is becoming a prime target for cybercriminals, therefore organizations need to rethink their backup security practices to adopt more resilient, ransomware-proof solutions.

The report revealed while over a third (34%) of respondents pointed to outdated backup systems as a major weakness, making them easier targets for ransomware attackers, 31% cited a lack of backup data encryption, which prevents sensitive data from being securely stored and transferred.

In addition, failed data backups were identified by 28% of respondents as another key vulnerability. These failures leave organizations unable to restore their systems after an attack, often resulting in lengthy downtimes and expensive recovery processes.

More troubling is the finding that ransomware attacks are increasingly targeting backup data directly. Normally, backups are considered a last line of defense in the event of an attack. However, with attackers now focusing on compromising this data, simply having backups is no longer enough. This shift has led to a growing need for immutable storage backup systems designed to ensure data cannot be altered or deleted by ransomware once it is stored.

An overwhelming 93% of survey respondents agreed that immutable storage is essential for protecting against ransomware attacks, while 84% of IT workers highlighted that they need better backup security to meet regulatory compliance. This need for enhanced security is further evidenced by the fact that 97% of respondents plan to invest in immutable storage solutions as part of their cybersecurity strategy.

Immutable storage is built on Zero Trust principles, a security model that assumes no user or system is inherently trustworthy. This approach focuses on continuously validating every access request and limiting permissions to minimize the risk of unauthorized access.

The Object First survey found that 93% of IT professionals believe aligning their backup systems with Zero Trust principles is key to safeguarding their data from ransomware. Zero Trust architecture ensures that even if cybercriminals gain access to a system, they are limited in their ability to manipulate or delete critical data.

While the need for enhanced security is clear, the survey also revealed that managing backup storage systems remains a challenge for many organizations. Nearly 41% of IT professionals stated that they lack the skills necessary to manage complex backup solutions, and 69% reported that budget constraints prevent them from hiring additional security experts.

“Our research shows that almost half of organizations suffered attacks that targeted their backup data, highlighting the criticality of adopting backup storage solutions that are ransomware-proof,” said Andrew Wittman, Chief Marketing Officer at Object First.

You might also like

• Microsoft is releasing Microsoft 365 Backup
• Take a look at the best business cloud storage
• Data backup and recovery tools are failing businesses

• Report warns long-lived credentials remain a significant security risk
• Outdated access keys increase vulnerability across cloud platforms
• Automated credential management is crucial for cloud security

As cloud computing adoption continues to rise, organizations increasingly rely on platforms such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud for their infrastructure and services, however, this means their security risks also grow more complex.

The recent Datadog State of Cloud Security 2024 report reveals one particularly concerning issue - the use of long-lived credentials, which pose significant security threats across all major cloud providers.

Despite advancements in cloud security tools and practices, many organizations still use long-lived credentials, which do not expire automatically.

The prevalence of long-lived credentials

Long-lived credentials, particularly those that are no longer actively managed, can serve as an easy target for attackers. If leaked or compromised, they could provide unauthorized access to sensitive data or systems. The longer these credentials remain in place without rotation or monitoring, the greater the risk of a security breach.

Datadog's report reveals nearly half (46%) of organizations still have unmanaged users with long-lived credentials. These credentials are particularly problematic because they are often embedded in various assets such as source code, container images, and build logs. If these credentials are not properly managed, they can easily be leaked or exposed, providing an entry point for attackers to access critical systems and data.

Almost two-thirds 62% of Google Cloud service accounts, 60% of AWS Identity and Access Management (IAM) users, and 46% of Microsoft Entra ID applications have access keys that are more than a year old.

In response to these risks, cloud providers have been making strides toward improving security. Datadog's report notes that the adoption of cloud guardrails is on the rise. These guardrails are automated rules or configurations designed to enforce security best practices and prevent human error.

For instance, 79% of Amazon S3 buckets now have either account-wide or bucket-specific public access blocks enabled, up from 73% the previous year. However, while these proactive measures are a step in the right direction, long-lived credentials remain a major blind spot in cloud security efforts.

Furthermore, the report added there is a conspicuously high number of cloud resources with overly permissive configurations.

About 18% of AWS EC2 instances and 33% of Google Cloud VMs were found to have sensitive permissions that could potentially allow an attacker to compromise the environment. In cases where a cloud workload is breached, these sensitive permissions can be exploited to steal associated credentials, enabling attackers to access the broader cloud environment.

In addition, there is the risk of third-party integrations, which are common in modern cloud environments. More than 10% of third-party integrations examined in the report were found to have risky cloud permissions, potentially allowing the vendor to access sensitive data or take control of the entire AWS account.

What's more, 2% of these third-party roles do not enforce the use of External IDs, leaving them susceptible to a "confused deputy" attack, a scenario where an attacker tricks a service into using its privileges to perform unintended actions.

“The findings from the State of Cloud Security 2024 suggest it is unrealistic to expect that long-lived credentials can be securely managed,” said Andrew Krug, Head of Security Advocacy at Datadog.

“In addition to long-lived credentials being a major risk, the report found that most cloud security incidents are caused by compromised credentials. To protect themselves, companies need to secure identities with modern authentication mechanisms, leverage short-lived credentials and actively monitor changes to APIs that attackers commonly use,” Krug added.

You might also like

• These are the best password managers
• Take a look at the best password generators
• Critical infrastructure being hit by dangerous new malware - routers, firewalls and fuel systems all under threat