Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ransomware Campaign Encrypting Amazon S3 Buckets using SSE-C

On January 13, 2025, Halcyon released a research blog about the Codefinger group conducting a ransomware campaign targeting Amazon S3 buckets. The attacks leverage AWS’s Server-Side Encryption with Customer Provided Keys (SSE-C) to encrypt data. The threat actors then demand ransom payments for the symmetric AES-256 keys required to decrypt it.

The Five Best Cloud Storage for Business Providers in 2025

Businesses are generating more data than ever, with 60% of company data being stored in the cloud, and businesses are storing 48% of their most important and sensitive data using some form of cloud storage. Even though businesses are using cloud storage, the risk of data breaches or attacks on company data is at the highest it's ever been, with 24% of breaches involving personal data and costing companies, on average, $4.88 million.

John Graham-Cumming at Web Summit: Empowering developers - Focus on innovation, not infrastructure

More and more companies are moving away from traditional cloud architecture to envision a new cloud that's more specialised to individual workloads and data needs, but what does it take to build more personalised and streamlined infrastructure? Join Cloudflare CTO John Graham-Cumming as he explores the next generation of cloud architecture and breaks down how it will lessen developers' burdens.

John Graham-Cumming at WebSummit: Making security simple

In today’s modern workplace, employees connect from anywhere, often using both personal and company devices and a mix of managed and unmanaged apps to stay productive. This dynamic creates a patchwork of unsecured endpoints and raises the stakes for data protection. Cultivating a seamless security culture requires solutions that blend naturally with how people work. How can we make security behaviours effortless, so they become second nature, embedding safety at every level of the organisation?

Dealing with Modern Cloud Servers for Business: Top Tips to Stay Secure

Modern cloud servers have replaced the need for organizations to own physical servers that take space and time to configure. So instead, they turn to cloud server providers who cater to business requests. By doing so, organizations get increased efficiency and the ability to scale for a fraction of the cost. Cloud servers make collaboration easier for remote teams and even acts as a source of data backup. It's no wonder 94% of enterprises have turned to modern cloud solutions for their servers.

OpenShift Virtualization Fast Disaster Recovery with Trilio in AWS ROSA Baremetal

In my previous blog post, (OpenShift Virtualization Backup and Restore with Trilio in AWS ROSA Baremetal ) I discussed how to protect VMs running in OpenShift Virtualization, specifically in AWS ROSA Baremetal environments. In this post, I want to focus on how you can recover a VM in less than 3 minutes. When it comes to recovery in Kubernetes environments, many of us feel relatively at ease, especially if the Persistent Volumes (PVs) are not particularly large.

Migrating to Cloud? A Complete Cloud Network Security Checklist

Migrating to the cloud is no longer just an option for businesses—it’s a strategic necessity in today’s digital landscape. The cloud offers unparalleled scalability, flexibility, and cost-efficiency, but it also presents a unique set of cloud network security challenges. A misstep in securing your network during migration can expose sensitive data, disrupt operations, and impact compliance.

Unlocking the power of Amazon VPC: Transforming security and efficiency across sectors

The rise in cyberattacks has become a pressing concern for organizations worldwide, threatening sensitive data, operational continuity, and trust. Cybercriminals are using increasingly complex strategies to attack vulnerabilities in systems and networks in a variety of organizations. By offering safe, segregated virtual networks in the cloud, Amazon Virtual Private Cloud (Amazon VPC) provides a strong defense against these attacks.

CrowdStrike Strengthens Container Security with Registry Scanning for Hybrid Clouds

Organizations of all sizes require security tools to meet their complex hybrid cloud needs. As their cloud environments and workloads evolve, this includes solutions that can scan for vulnerabilities in container images regardless of their location across public and private cloud environments. The problem is, most organizations lack this capability. Many use tools that don’t allow the flexibility to move quickly and scan their full breadth of cloud assets.