Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

January 2025

Improving AWS security services with Sysdig Secure

One of the primary goals of information security is to protect data, which of course entails protecting the resources that store and provide access to that data. According to the NIST Cybersecurity Framework, organizations need to develop and implement the necessary protections to restrict or mitigate the effect of a possible cybersecurity incident. Security should be integrated right from the source of the cloud architecture design process.

Simplifying Zero Trust Security for AWS with Teleport

Speakers: Managing secure access has become a critical challenge for organizations using AWS at scale. Traditional security approaches, like passwords and virtual private networks (VPNs), are not sufficient to protect growing infrastructures while maintaining productivity. This webinar, "Simplifying Zero Trust Security for AWS with Teleport," explores how Teleport enables a modern, identity-first approach to AWS access.

Stratoshark: Extending Wireshark's legacy into the cloud

There is nothing more exciting (or nerve-wracking) than sharing something you’ve created with the world. Over 25 years ago, we started working on Wireshark. For us, it has always been more than just a piece of software — it’s how we met, how we began our careers, and how we learned to solve problems that once seemed insurmountable.

Record-breaking 5.6 Tbps DDoS attack and global DDoS trends for 2024 Q4

Welcome to the 20th edition of the Cloudflare DDoS Threat Report, marking five years since our first report in 2020. Published quarterly, this report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the fourth quarter of 2024 and look back at the year as a whole.

Build, Secure, and Accelerate Your Website with Cloudflare's One Centralized Platform

Take control of your online presence with Cloudflare, your ultimate tool for site success. Easily register domains, develop powerful applications, and safeguard your website with industry-leading security, all in one easy-to-use platform. Learn how to streamline your workflow, speed up your site, and protect your data with Cloudflare. Perfect for developers, entrepreneurs, and businesses looking to scale their online presence.

Internxt Becomes The First Cloud Storage With Post-Quantum Cryptography

Internxt is proud to be one of the first cloud storage companies to protect business and individual data with the world’s most advanced encryption, post-quantum cryptography. Our post-quantum encryption protects your files and data from the potential threats of quantum computers that hold the power to break current encryption protocols due to their superior ability to solve complex algorithms in minutes or even seconds.

Enhance Your Security Posture with Microsoft Azure Native Tools and Tanium

When it comes to securing your business, visibility into your company’s devices is key. As we so often say, you can’t protect what you can’t see. What’s more, visibility into your devices needs to be accurate and current – your IT security and operations teams can’t protect your environment if they’re working from data that’s hours (or days or weeks) old.

What is AWS EC2? Everything about EC2 Fundamentals in AWS

Elastic Compute Cloud (EC2) is an Amazon Web Services (AWS) hosting service that extends scalable and secure virtual computing systems known as instances. They allow users to have their applications hosted in a scalable environment whereby computing resources can be easily scaled up or down as necessary. EC2 provides several instance types that can handle a variety of uses, from general-purpose and compute instances to those designed for memory-intensive applications.

Cloud Security Myths in Online Music Streaming

The way music streams online often feels like magic. Artists upload songs, listeners hit play, and the melodies reach your ears instantly. Behind that ease lies a sophisticated cloud infrastructure. Many misunderstand this system, especially around security in music streaming platforms. Some fear losing control of their creations or worry about piracy risks tied to the cloud. But what's true? What's just a myth?

Sweet Security Introduces Patent-Pending LLM-Powered Detection Engine, Reducing Cloud Detection Noise to 0.04%

Sweet Security, a leader in cloud runtime detection and response, today announced the launch of its groundbreaking patent-pending Large Language Model (LLM)-powered cloud detection engine. This innovation enhances Sweet's unified detection and response solution, enabling it to reduce cloud detection noise to an unprecedented 0.04%. Sweet uses advanced AI to help security teams navigate complex and dynamic environments with improved precision and confidence.

The Critical Evolution of Cloud Detection and Response

Cloud security has reached an inflection point. Organizations have accelerated their cloud adoption and must navigate a complex threat landscape where workloads spin up and down in seconds, applications deploy continuously and identities span multiple services and providers.

Demonstrating reduction of vulnerability classes: a key step in CISA's "Secure by Design" pledge

In today’s rapidly evolving digital landscape, securing software systems has never been more critical. Cyber threats continue to exploit systemic vulnerabilities in widely used technologies, leading to widespread damage and disruption. That said, the United States Cybersecurity and Infrastructure Agency (CISA) helped shape best practices for the technology industry with their Secure-by-Design pledge.

Ransomware Campaign Encrypting Amazon S3 Buckets using SSE-C

On January 13, 2025, Halcyon released a research blog about the Codefinger group conducting a ransomware campaign targeting Amazon S3 buckets. The attacks leverage AWS’s Server-Side Encryption with Customer Provided Keys (SSE-C) to encrypt data. The threat actors then demand ransom payments for the symmetric AES-256 keys required to decrypt it.

The Five Best Cloud Storage for Business Providers in 2025

Businesses are generating more data than ever, with 60% of company data being stored in the cloud, and businesses are storing 48% of their most important and sensitive data using some form of cloud storage. Even though businesses are using cloud storage, the risk of data breaches or attacks on company data is at the highest it's ever been, with 24% of breaches involving personal data and costing companies, on average, $4.88 million.

John Graham-Cumming at WebSummit: Making security simple

In today’s modern workplace, employees connect from anywhere, often using both personal and company devices and a mix of managed and unmanaged apps to stay productive. This dynamic creates a patchwork of unsecured endpoints and raises the stakes for data protection. Cultivating a seamless security culture requires solutions that blend naturally with how people work. How can we make security behaviours effortless, so they become second nature, embedding safety at every level of the organisation?

John Graham-Cumming at Web Summit: Empowering developers - Focus on innovation, not infrastructure

More and more companies are moving away from traditional cloud architecture to envision a new cloud that's more specialised to individual workloads and data needs, but what does it take to build more personalised and streamlined infrastructure? Join Cloudflare CTO John Graham-Cumming as he explores the next generation of cloud architecture and breaks down how it will lessen developers' burdens.

Dealing with Modern Cloud Servers for Business: Top Tips to Stay Secure

Modern cloud servers have replaced the need for organizations to own physical servers that take space and time to configure. So instead, they turn to cloud server providers who cater to business requests. By doing so, organizations get increased efficiency and the ability to scale for a fraction of the cost. Cloud servers make collaboration easier for remote teams and even acts as a source of data backup. It's no wonder 94% of enterprises have turned to modern cloud solutions for their servers.

OpenShift Virtualization Fast Disaster Recovery with Trilio in AWS ROSA Baremetal

In my previous blog post, (OpenShift Virtualization Backup and Restore with Trilio in AWS ROSA Baremetal ) I discussed how to protect VMs running in OpenShift Virtualization, specifically in AWS ROSA Baremetal environments. In this post, I want to focus on how you can recover a VM in less than 3 minutes. When it comes to recovery in Kubernetes environments, many of us feel relatively at ease, especially if the Persistent Volumes (PVs) are not particularly large.

Migrating to Cloud? A Complete Cloud Network Security Checklist

Migrating to the cloud is no longer just an option for businesses—it’s a strategic necessity in today’s digital landscape. The cloud offers unparalleled scalability, flexibility, and cost-efficiency, but it also presents a unique set of cloud network security challenges. A misstep in securing your network during migration can expose sensitive data, disrupt operations, and impact compliance.

Unlocking the power of Amazon VPC: Transforming security and efficiency across sectors

The rise in cyberattacks has become a pressing concern for organizations worldwide, threatening sensitive data, operational continuity, and trust. Cybercriminals are using increasingly complex strategies to attack vulnerabilities in systems and networks in a variety of organizations. By offering safe, segregated virtual networks in the cloud, Amazon Virtual Private Cloud (Amazon VPC) provides a strong defense against these attacks.

CrowdStrike Strengthens Container Security with Registry Scanning for Hybrid Clouds

Organizations of all sizes require security tools to meet their complex hybrid cloud needs. As their cloud environments and workloads evolve, this includes solutions that can scan for vulnerabilities in container images regardless of their location across public and private cloud environments. The problem is, most organizations lack this capability. Many use tools that don’t allow the flexibility to move quickly and scan their full breadth of cloud assets.

The Essential Cloud Native Security Tutorial

The cloud gives you agility, speed, and flexibility – but it also opens new doors for attackers. For DevOps teams, every line of code, every container, and every deployment pipeline is a potential entry point and missteps are easier than ever. Misconfigurations alone cause 80% of all security breaches in cloud environments, so the stakes are even higher. This poses a severe security risk with wide-ranging consequences, making it evident that cloud-native environments demand a new security mindset.

8 Privileged Access Management (PAM) Best Practices for Cloud Infrastructure

Even the simplest mistakes can leave your data wide open to cyber threats. If the worst happens and there’s an attack, cybercriminals gain free-for-all access to your cloud resources. They tamper with your data, disrupt workflows, and steal sensitive information, meaning the need for Privileged Access Management (PAM) best practices are more indispensable than ever for any robust cloud security strategy.

Perimeter Security vs Cyber Resilience: CSPM vs DSPM

In this episode of Into the Breach, James Purvis is joined by Noam Perel to explore the key differences between CSPM (Cloud Security Posture Management) and DSPM (Data Security Posture Management). They dive into how these tools address different problems, their unique approaches to security, and why organizations benefit from leveraging both. Discover how DSPM’s data-centric approach complements CSPM’s infrastructure focus, the distinct personas driving each, and how together they provide a stronger, more resilient security posture.

Falcon Cloud Security Asset Graph: Demo Drill Down

Gain the edge in the race against adversaries by leveraging unified visibility across your attack surface—from endpoint to cloud. See how Falcon Cloud Security's Asset Graph uncovers vulnerabilities, highlights misconfigurations, and automatically maps the complete attack trajectory, empowering you to respond faster and mitigate threats effectively.

2025 Internet predictions (AI included) with John Graham-Cumming

Join host João Tomé and Cloudflare's CTO John Graham-Cumming for the final episode of "This Week in Net" in 2024, broadcasting from a rainy Lisbon, Portugal. The conversation reflects on Cloudflare's achievements throughout the year, including significant developments in Workers platform, AI capabilities, and hardware innovations. The episode explores predictions for 2025, examining the intersection of AI and privacy, quantum-resistant encryption, and cybersecurity threats. John Graham-Cumming shares his perspective on how AI capabilities will become more seamlessly integrated into daily life.