A new ransomware crew dubbed Codefinger targets AWS S3 buckets and uses the cloud giant's own server-side encryption with customer provided keys (SSE-C) to lock up victims' data before demanding a ...

A sophisticated ransomware gang, Codefinger, has a cunning new technique for encrypting data stored in AWS S3 buckets without traditional ransomware tools. Instead, they exploit the AWS server-side ...

After accessing the buckets, they would use AWS server-side encryption with customer provided keys (SSE-C) to lock down the files. But that’s not where creativity ends with Codefinger.

Amazon has announced key security enhancements for Redshift, a popular data warehousing solution, to help prevent data ...

Amazon’s security improvements for its AWS Redshift managed data warehouse service are welcome additions, says an expert.

Once the attack is successfully executed, it is impossible to decrypt the data without the AES-256 keys thanks to how the attack leverages AWS’s encryption infrastructure. “If this method ...

Cloud-Encryption-Market The increasing adoption of cloud services across industries, coupled with stringent data security regulations, is d ...

In an interview with CRN, AWS’ Grusz explains five key features of the AWS Marketplace ... So if they turn off something like encryption on an S3 bucket, that would then show up in that very ...

The Codefinger ransomware represents a new frontier in cyber threats, specifically targeting AWS S3 buckets. By exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C), attackers gain ...