Accelerating CI with AWS CodeBuild: Parallel test execution now available

I’m excited to announce that AWS CodeBuild now supports parallel test execution, so you can run your test suites concurrently and reduce build times significantly.

With the demo project I wrote for this post, the total test time went down from 35 minutes to six minutes, including the time to provision the environments. These two screenshots from the AWS Management Console show the difference.

Sequential execution of the test suite

CodeBuild Parallel Test Results

Parallel execution of the test suite

CodeBuild Parallel Test Results

Very long test times pose a significant challenge when running continuous integration (CI) at scale. As projects grow in complexity and team size, the time required to execute comprehensive test suites can increase dramatically, leading to extended pipeline execution times. This not only delays the delivery of new features and bug fixes, but also hampers developer productivity by forcing them to wait for build results before proceeding with their tasks. I have experienced pipelines that took up to 60 minutes to run, only to fail at the last step, requiring a complete rerun and further delays. These lengthy cycles can erode developer trust in the CI process, contribute to frustration, and ultimately slow down the entire software delivery cycle. Moreover, long-running tests can lead to resource contention, increased costs because of wasted computing power, and reduced overall efficiency of the development process.

With parallel test execution in CodeBuild, you can now run your tests concurrently across multiple build compute environments. This feature implements a sharding approach where each build node independently executes a subset of your test suite. CodeBuild provides environment variables that identify the current node number and the total number of nodes, which are used to determine which tests each node should run. There is no control build node or coordination between nodes at build time—each node operates independently to execute its assigned portion of your tests.

To enable test splitting, configure the batch fanout section in your buildspec.xml, specifying the desired parallelism level and other relevant parameters. Additionally, use the codebuild-tests-run utility in your build step, along with the appropriate test commands and the chosen splitting method.

The tests are split based on the sharding strategy you specify. codebuild-tests-run offers two sharding strategies:

  • Equal-distribution. This strategy sorts test files alphabetically and distributes them in chunks equally across parallel test environments. Changes in the names or quantity of test files might reassign files across shards.
  • Stability. This strategy fixes the distribution of tests across shards by using a consistent hashing algorithm. It maintains existing file-to-shard assignments when new files are added or removed.

CodeBuild supports automatic merging of test reports when running tests in parallel. With automatic test report merging, CodeBuild consolidates tests reports into a single test summary, simplifying result analysis. The merged report includes aggregated pass/fail statuses, test durations, and failure details, reducing the need for manual report processing. You can view the merged results in the CodeBuild console, retrieve them using the AWS Command Line Interface (AWS CLI), or integrate them with other reporting tools to streamline test analysis.

Let’s look at how it works
Let me demonstrate how to implement parallel testing in a project. For this demo, I created a very basic Python project with hundreds of tests. To speed things up, I asked Amazon Q Developer on the command line to create a project and 1,800 test cases. Each test case is in a separate file and takes one second to complete. Running all tests in a sequence requires 30 minutes, excluding the time to provision the environment.

In this demo, I run the test suite on ten compute environments in parallel and measure how long it takes to run the suite.

To do so, I added a buildspec.yml file to my project.

version: 0.2

batch:
  fast-fail: false
  build-fanout:
    parallelism: 10 # ten runtime environments 
    ignore-failure: false

phases:
  install:
    commands:
      - echo 'Installing Python dependencies'
      - dnf install -y python3 python3-pip
      - pip3 install --upgrade pip
      - pip3 install pytest
  build:
    commands:
      - echo 'Running Python Tests'
      - |
         codebuild-tests-run \
          --test-command 'python -m pytest --junitxml=report/test_report.xml' \
          --files-search "codebuild-glob-search 'tests/test_*.py'" \
          --sharding-strategy 'equal-distribution'
  post_build:
    commands:
      - echo "Test execution completed"

reports:
  pytest_reports:
    files:
      - "*.xml"
    base-directory: "report"
    file-format: JUNITXML 

There are three parts to highlight in the YAML file.

First, there’s a build-fanout section under batch. The parallelism command tells CodeBuild how many test environments to run in parallel. The ignore-failure command indicates if failure in any of the fanout build tasks can be ignored.

Second, I use the pre-installed codebuild-tests-run command to run my tests.

This command receives the complete list of test files and decides which of the tests must be run on the current node.

  • Use the sharding-strategy argument to choose between equally distributed or stable distribution as I explain above.
  • Use the files-search argument to pass all the files that are candidates for a run. We recommend to use the provided codebuild-glob-search command for performance reasons, but any file search tool, such as find(1), will work.
  • I pass the actual test command to run on the shard with the test-command argument.

Lastly, the reports section instructs CodeBuild to collect and merge the test reports on each node.

Then, I open the CodeBuild console to create a project and a batch build configuration for this project. There’s nothing new here, so I’ll spare you the details. The documentation has all the details to get you startedParallel testing works on batch builds. Make sure to configure your project to run in batch.

CodeBuild : create a batch build

Now, I’m ready to trigger an execution of the test suite. I can commit new code on my GitHub repository or trigger the build in the console.

CodeBuild : trigger a new build

After a few minutes, I see a status report of the different steps of the build; with a status for each test environment or shard.

CodeBuild: status

When the test is complete, I select the Reports tab to access the merged test reports.

CodeBuild: test reports

The Reports section aggregates all test data from all shards and keeps the history for all builds. I select my most recent build in the Report history section to access the detailed report.

CodeBuild: Test Report

As expected, I can see the aggregated and the individual status for each of my 1,800 test cases. In this demo, they’re all passing, and the report is green.

The 1,800 tests of the demo project take one second each to complete. When I run this test suite sequentially, it took 35 minutes to complete. When I run the test suite in parallel on ten compute environments, it took six minutes to complete, including the time to provision the environments. The parallel run took 17.1 percent of the time of the sequential run. Actual numbers will vary with your projects.

Additional things to know
This new capability is compatible with all testing frameworks. The documentation includes examples for Django, Elixir, Go, Java (Maven), Javascript (Jest), Kotlin, PHPUnit, Pytest, Ruby (Cucumber), and Ruby (RSpec).

For test frameworks that don’t accept space-separated lists, the codebuild-tests-run CLI provides a flexible alternative through the CODEBUILD_CURRENT_SHARD_FILES environment variable. This variable contains a newline-separated list of test file paths for the current build shard. You can use it to adapt to different test framework requirements and format test file names.

You can further customize how tests are split across environments by writing your own sharding script and using the CODEBUILD_BATCH_BUILD_IDENTIFIER environment variable, which is automatically set in each build. You can use this technique to implement framework-specific parallelization or optimization.

Pricing and availability
With parallel test execution, you can now complete your test suites in a fraction of the time previously required, accelerating your development cycle and improving your team’s productivity. The demo project I created to illustrate this post consumes 18.7 percent of the time of a sequential build.

Parallel test execution is available on all three compute modes offered by CodeBuild: on-demand, reserved capacity, and AWS Lambda compute.

This capability is available today in all AWS Regions where CodeBuild is offered, with no additional cost beyond the standard CodeBuild pricing for the compute resources used.

I invite you to try parallel test execution in CodeBuild today. Visit the AWS CodeBuild documentation to learn more and get started with parallelizing your tests.

— seb

PS: Here’s the prompt I used to create the demo application and its test suite: “I’m writing a blog post to announce codebuild parallel testing. Write a very simple python app that has hundreds of tests, each test in a separate test file. Each test takes one second to complete.”


How is the News Blog doing? Take this 1 minute survey!

(This survey is hosted by an external company. AWS handles your information as described in the AWS Privacy Notice. AWS will own the data gathered via this survey and will not share the information collected with survey respondents.)

from AWS News Blog https://ift.tt/QEATomV
via IFTTT

When Getting Phished Puts You in Mortal Danger

Many successful phishing attacks result in a financial loss or malware infection. But falling for some phishing scams, like those currently targeting Russians searching online for organizations that are fighting the Kremlin war machine, can cost you your freedom or your life.

The real website of the Ukrainian paramilitary group “Freedom of Russia” legion. The text has been machine-translated from Russian.

Researchers at the security firm Silent Push mapped a network of several dozen phishing domains that spoof the recruitment websites of Ukrainian paramilitary groups, as well as Ukrainian government intelligence sites.

The website legiohliberty[.]army features a carbon copy of the homepage for the Freedom of Russia Legion (a.k.a. “Free Russia Legion”), a three-year-old Ukraine-based paramilitary unit made up of Russian citizens who oppose Vladimir Putin and his invasion of Ukraine.

The phony version of that website copies the legitimate site — legionliberty[.]army — providing an interactive Google Form where interested applicants can share their contact and personal details. The form asks visitors to provide their name, gender, age, email address and/or Telegram handle, country, citizenship, experience in the armed forces; political views; motivations for joining; and any bad habits.

“Participation in such anti-war actions is considered illegal in the Russian Federation, and participating citizens are regularly charged and arrested,” Silent Push wrote in a report released today. “All observed campaigns had similar traits and shared a common objective: collecting personal information from site-visiting victims. Our team believes it is likely that this campaign is the work of either Russian Intelligence Services or a threat actor with similarly aligned motives.”

Silent Push’s Zach Edwards said the fake Legion Liberty site shared multiple connections with rusvolcorps[.]net. That domain mimics the recruitment page for a Ukrainian far-right paramilitary group called the Russian Volunteer Corps (rusvolcorps[.]com), and uses a similar Google Forms page to collect information from would-be members.

Other domains Silent Push connected to the phishing scheme include: ciagov[.]icu, which mirrors the content on the official website of the U.S. Central Intelligence Agency; and hochuzhitlife[.]com, which spoofs the Ministry of Defense of Ukraine & General Directorate of Intelligence (whose actual domain is hochuzhit[.]com).

According to Edwards, there are no signs that these phishing sites are being advertised via email. Rather, it appears those responsible are promoting them by manipulating the search engine results shown when someone searches for one of these anti-Putin organizations.

In August 2024, security researcher Artem Tamoian posted on Twitter/X about how he received startlingly different results when he searched for “Freedom of Russia legion” in Russia’s largest domestic search engine Yandex versus Google.com. The top result returned by Google was the legion’s actual website, while the first result on Yandex was a phishing page targeting the group.

“I think at least some of them are surely promoted via search,” Tamoian said of the phishing domains. “My first thread on that accuses Yandex, but apart from Yandex those websites are consistently ranked above legitimate in DuckDuckGo and Bing. Initially, I didn’t realize the scale of it. They keep appearing to this day.”

The results of a search at DuckDuckGo on Mar. 27, 2025 for “Freedom of Russia legion” shows the first result returned is a phishing domain.

Tamoian, a native Russian who left the country in 2019, is the founder of the cyber investigation platform malfors.com. He recently discovered two other sites impersonating the Ukrainian paramilitary groups — legionliberty[.]world and rusvolcorps[.]ru — and reported both to Cloudflare. When Cloudflare responded by blocking the sites with a phishing warning, the real Internet address of these sites was exposed as belonging to a known “bulletproof hosting” network called Stark Industries Solutions Ltd.

Stark Industries Solutions appeared two weeks before Russia invaded Ukraine in February 2022, materializing out of nowhere with hundreds of thousands of Internet addresses in its stable — many of them originally assigned to Russian government organizations. In May 2024, KrebsOnSecurity published a deep dive on Stark, which has repeatedly been used to host infrastructure for distributed denial-of-service (DDoS) attacks, phishing, malware and disinformation campaigns from Russian intelligence agencies and pro-Kremlin hacker groups.

In March 2023, Russia’s Supreme Court designated the Freedom of Russia legion as a terrorist organization, meaning that Russians caught communicating with the group could face between 10 and 20 years in prison.

Tamoian said those searching online for information about these paramilitary groups have become easy prey for Russian security services.

“I started looking into those phishing websites, because I kept stumbling upon news that someone gets arrested for trying to join [the] Ukrainian Army or for trying to help them,” Tamoian told KrebsOnSecurity. “I have also seen reports [of] FSB contacting people impersonating Ukrainian officers, as well as using fake Telegram bots, so I thought fake websites might be an option as well.”

Search results showing news articles about people in Russia being sentenced to lengthy prison terms for attempting to aid Ukrainian paramilitary groups.

Tamoian said reports surface regularly in Russia about people being arrested for trying carry out an action requested by a “Ukrainian recruiter,” with the courts unfailingly imposing harsh sentences regardless of the defendant’s age.

“This keeps happening regularly, but usually there are no details about how exactly the person gets caught,” he said. “All cases related to state treason [and] terrorism are classified, so there are barely any details.”

Tamoian said while he has no direct evidence linking any of the reported arrests and convictions to these phishing sites, he is certain the sites are part of a larger campaign by the Russian government.

“Considering that they keep them alive and keep spawning more, I assume it might be an efficient thing,” he said. “They are on top of DuckDuckGo and Yandex, so it unfortunately works.”

Further reading: Silent Push report, Russian Intelligence Targeting its Citizens and Informants.

from Krebs on Security https://ift.tt/ZEPpIFT
via IFTTT

G2 Names INE 2025 Cybersecurity Training Leader

Cary, North Carolina, March 27th, 2025, CyberNewsWire

INE, a global leader in networking and cybersecurity training and certifications, is proud to announce it is the recipient of twelve badges in G2’s Spring 2025 Report, including Grid Leader for Cybersecurity Professional Development, Online Course Providers, and Technical Skills Development, which highlight INE’s superior performance relative to competitors. 

“INE solves the problem of accessible, hands-on security training with structured learning paths and real-world labs,” says SOC Analyst Sai Tharun K. “It helps bridge the gap between theory and practical skills. For me, it has been very valuable in refining my penetration testing, cloud security, and threat analysis skills.”

G2 calculates rankings using a proprietary algorithm sourced from verified reviews of actual product users and is a trusted review source for thousands of organizations around the world. Its recognition of INE’s strong performance in enterprise, small business, and global impact for technical training showcases the depth and breadth of INE’s online learning library

“We’re incredibly proud to once again be at the forefront of the training industry, recognized by G2 users in a time when cyber threats are escalating in both frequency and complexity,” said Dara Warn, CEO of INE. “This recognition reflects our commitment to providing training that not only keeps pace with but anticipates the dynamic intersection of cybersecurity with networking, cloud services, and broader IT disciplines. At INE, we believe deeply in equipping professionals and organizations with the robust, up-to-date skills necessary to navigate and secure today’s rapidly changing digital landscapes. A huge thank you to our dedicated team and learners, who are essential in our mission to transform cybersecurity training to meet the urgent demands of the current environment.”

INE’s G2 Spring 2025 Report highlights include:

  • Momentum Leader, Cybersecurity Professional Development
  • Momentum Leader, Online Course Providers
  • Momentum Leader, Technical Skills Development
  • Grid Leader, Cybersecurity Professional Development
  • Grid Leader, Online Course Providers
  • Grid Leader, Technical Skills Development
  • Regional Leader, Europe Online Course Providers
  • Regional Leader, Asia Online Course Providers
  • Regional Leader, Asia Pacific Online Course Providers
  • Grid Leader, Small-Business Technical Skills Development
  • Grid Leader, Small-Business Online Course Providers
  • High Performer, India Online Course Providers

“INE’s hands-on labs and real-world scenarios have helped me refine by skills,” said Leonard R.G., a Pentesting Consultant. “INE is solving the hiring issues most HR people have when they are hiring cybersecurity workers,” adds Batuhan A., a Cyber Security Researcher. 

In 2024, the prestigious SC Awards recognized INE Security, INE’s cybersecurity-specific training, as the Best IT Security-Related Training Program. This designation further underscores INE Security’s role as a frontrunner in cybersecurity training for businesses, providing the tools and knowledge essential for tackling today’s complex cyber threats.

INE Security was also presented with 4 awards from Global InfoSec Awards at RSAC 2024, including: 

  • Best Product – Cybersecurity Education for Enterprises
  • Most Innovative – Cybersecurity Education for SMBs
  • Publisher’s Choice – Cybersecurity Training
  • Cutting Edge – Cybersecurity Training Videos

Combined, these accolades highlight INE’s leadership in delivering innovative and effective networking and cybersecurity education across various market segments, including enterprises and small to medium-sized businesses.

About INE Security

INE Security is the premier provider of online networking and cybersecurity training and certification. Harnessing a powerful hands-on lab platform, cutting-edge technology, a global video distribution network, and world-class instructors, INE Security is the top training choice for Fortune 500 companies worldwide for cybersecurity training in business and for IT professionals looking to advance their careers. INE Security’s suite of learning paths offers an incomparable depth of expertise across cybersecurity and is committed to delivering advanced technical training while also lowering the barriers worldwide for those looking to enter and excel in an IT career.

Contact

Kathryn Brown
INE Security
kbrown@ine.com

The post G2 Names INE 2025 Cybersecurity Training Leader first appeared on Cybersecurity Insiders.

The post G2 Names INE 2025 Cybersecurity Training Leader appeared first on Cybersecurity Insiders.

from Cybersecurity Insiders https://ift.tt/7VtcaM0
via IFTTT

Firewall support for AWS Amplify hosted sites

Today, we’re announcing the general availability of the AWS WAF integration with AWS Amplify Hosting.

Web application owners are constantly working to protect their applications from a variety of threats. Previously, if you wanted to implement a robust security posture for your Amplify Hosted applications, you needed to create architectures using Amazon CloudFront distributions with AWS WAF protection, which required additional configuration steps, expertise, and management overhead.

With the general availability of AWS WAF in Amplify Hosting, you can now directly attach a web application firewall to your AWS Amplify apps through a one-click integration in the Amplify console or using infrastructure as code (IaC). This integration gives you access to the full range of AWS WAF capabilities including managed rules, which provide protection against common web exploits and vulnerabilities like SQL injection and cross-site scripting (XSS). You can also create your own custom rules based on your specific application needs.

This new capability helps you implement defense-in-depth security strategies for your web applications. You can take advantage of AWS WAF rate-based rules to protect against distributed denial of service (DDoS) attacks by limiting the rate of requests from IP addresses. Additionally, you can implement geo-blocking to restrict access to your applications from specific countries, which is particularly valuable if your service is designed for specific geographic regions.

Let’s see how it works
Setting up AWS WAF protection for your Amplify app is straightforward. From the Amplify console, navigate to your app settings, select the Firewall tab, and choose the predefined rules you want to apply to your configuration. AWS WAF integration in AWS Amplify Hosting

Amplify hosting simplifies configuring firewall rules. You can activate four categories of protection.

  • Amplify-recommended firewall protection – Protect against the most common vulnerabilities found in web applications, block IP addresses from potential threats based on Amazon internal threat intelligence, and protect against malicious actors discovering application vulnerabilities.
  • Restrict access to amplifyapp.com – Restrict access to the default Amplify generated amplifyapp.com domain. This is useful when you add a custom domain to prevent bots and search engines from crawling the domain.
  • Enable IP address protection – Restrict web traffic by allowing or blocking requests from specified IP address ranges.
  • Enable country protection – Restrict access based on specific countries.

Protections enabled through the Amplify console will create an underlying web access control list (ACL) in your AWS account. For fine-grained rulesets, you can use the AWS WAF console rule builder.

After a few minutes, the rules are associated to your app and AWS WAF blocks suspicious requests.

If you want to see AWS WAF in action, you can simulate an attack and monitor it using the AWS WAF request inspection capabilities. For example, you can send a request with an empty User-Agent value. It will trigger a blocking rule in AWS WAF.

Let’s first send a valid request to my app.

curl -v -H "User-Agent: MyUserAgent" https://main.d3sk5bt8rx6f9y.amplifyapp.com/
* Host main.d3sk5bt8rx6f9y.amplifyapp.com:443 was resolved.
...(redacted for brevity)...
> GET / HTTP/2
> Host: main.d3sk5bt8rx6f9y.amplifyapp.com
> Accept: */*
> User-Agent: MyUserAgent
> 
* Request completely sent off
< HTTP/2 200 
< content-type: text/html
< content-length: 0
< date: Mon, 10 Mar 2025 14:45:26 GMT
 

We can observe that the server returned an HTTP 200 (OK) message.

Then, send a request with no value associated to the User-Agent HTTP header.

 curl -v -H "User-Agent: " https://main.d3sk5bt8rx6f9y.amplifyapp.com/ 
* Host main.d3sk5bt8rx6f9y.amplifyapp.com:443 was resolved.
... (redacted for brevity) ...
> GET / HTTP/2
> Host: main.d3sk5bt8rx6f9y.amplifyapp.com
> Accept: */*
> 
* Request completely sent off
< HTTP/2 403 
< server: CloudFront
... (redacted for brevity) ...
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>

We can observe that the server returned an HTTP 403 (Forbidden) message.

AWS WAF provide visibility into request patterns, helping you fine-tune your security settings over time. You can access logs through Amplify Hosting or the AWS WAF console to analyze traffic trends and refine security rules as needed.

AWS WAF integration in AWS Amplify Hosting - Dashboard

Availability and pricing
Firewall support is available in all AWS Regions in which Amplify Hosting operates. This integration falls under an AWS WAF global resource, similar to Amazon CloudFront. Web ACLs can be attached to multiple Amplify Hosting apps, but they must reside in the same Region.

The pricing for this integration follows the standard AWS WAF pricing model, You pay for the AWS WAF resources you use based on the number of web ACLs, rules, and requests. On top of that, AWS Amplify Hosting adds $15/month when you attach a web application firewall to your application. This is prorated by the hour.

This new capability brings enterprise-grade security features to all Amplify Hosting customers, from individual developers to large enterprises. You can now build, host, and protect your web applications within the same service, reducing the complexity of your architecture and streamlining your security management.

To learn more, visit the AWS WAF integration documentation for Amplify or try it directly in the Amplify console.

— seb


How is the News Blog doing? Take this 1 minute survey!

(This survey is hosted by an external company. AWS handles your information as described in the AWS Privacy Notice. AWS will own the data gathered via this survey and will not share the information collected with survey respondents.)

from AWS News Blog https://ift.tt/yQDZuAv
via IFTTT

Commerce limits 19 Chinese, Taiwanese companies from buying U.S. tech

The Commerce Department plans to finalize economic sanctions this week on nearly 20 Chinese and Taiwanese organizations, citing the need to limit their access to U.S. cloud, artificial intelligence and quantum computing technologies.

The sanctions, which will be detailed and published Friday in the Federal Register , would place additional license requirements on, and limit the availability of, license exceptions for exports, re-exports, and transfers of certain technologies to those entities.

Among the Trump administration’s stated goals for the sanctions are restricting the Chinese government from acquiring high-performance and exascale computing capabilities to build AI systems and quantum computers for military use.

“We will not allow adversaries to exploit American technology to bolster their own militaries and threaten American lives,” Commerce Secretary Howard Lutnick said in a statement. “We are committed to using every tool at the Department’s disposal to ensure our most advanced technologies stay out of the hands of those who seek to harm Americans.”

The newly added Chinese entities include the Beijing Academy of Artificial Intelligence and Beijing Innovation Wisdom Technology, for acquiring or attempting to acquire U.S. products for AI models, as well as advanced computing chips. Those efforts, the Commerce Department claims, are in support of the Chinese government’s larger military modernization goals.

Six Chinese and Taiwanese subsidiaries of Inspur Group, one of China’s largest cloud computing firms, were also placed on the sanctions list, citing their use of U.S. parts and components in the development of supercomputers for the Chinese military.

Four other Chinese firms — Henan Dingxin Information Industry, Nettrix Information Industry, Suma Technology and Suma-USI Electronics — were sanctioned for their alleged development of Chinese exascale supercomputers and providing manufacturing support for Sugan, a previously sanctioned Chinese entity.

The firms were all placed on the Bureau of Industry and Security’s export sanctions list for organizations engaged in “activities contrary to the national security or foreign policy interests” of the United States. The designation limits the ability of these companies to gain licenses to buy, import or otherwise legally acquire technologies from U.S. firms that may be used to power Beijing’s cloud, AI and quantum computing ambitions.

For certain entities, such as the Beijing Academy of Artificial Intelligence and Beijing Innovation Wisdom Technology, those license reviews will happen with a “policy of a presumption of denial.” For others, such as the firms working on exascale supercomputing, the reviews will be done under a “policy of denial.”

A separate Commerce action set to be finalized Friday places similar sanctions on an additional seven Chinese companies for their work developing quantum computing technologies. Those companies include Scikro (Hong Kong) Instruments, Scikro (Shanghai) Instrument, Anhui Kehua Sci-Tech Trading, Associated Optoelectronics, Chongqing Southwest Integrated Circuit Design, ORICAS Import and Export Corporation, and Physike Technology.

The sanctions are the latest example of bipartisan U.S. efforts to restrict or stop the flow of U.S. technologies and equipment — such as high-performance computing chips — that are foundational to a number of emerging technologies like AI and quantum computing. The Biden administration spent much of its last two years in office attempting to restrict the flow of semiconductors to China.

Previous attempts to restrict the supply of similar technologies to China have had mixed results. While conventional wisdom over the past year held that China was behind the U.S. in the global AI race, 2025 has seen multiple Chinese companies release large language models that are capable of performing as well as many of the top American-made models, in some cases with far more efficient computing and (allegedly) at a significantly cheaper cost.

China has also been steadily working to build up its own domestic industry for semiconductors and other key technologies, with the goal of weaning itself off dependence from U.S. firms.

“This is shocking to me, because I thought that the restrictions we placed on chips would keep them back,” former Google CEO Eric Schmidt said last November when discussing Chinese AI advancements over the past year and a half.

The post Commerce limits 19 Chinese, Taiwanese companies from buying U.S. tech appeared first on CyberScoop.

from CyberScoop https://ift.tt/YbehWAR
via IFTTT

String of defects in popular Kubernetes component puts 40% of cloud environments at risk

More than 40% of cloud environments are at risk of an account takeover due to a series of five recently discovered vulnerabilities — one regarded critical — in the Ingress Ngnix Controller for Kubernetes, according to security research published this week.

Upon discovering the string of vulnerabilities in one of most widely used ingress controllers for Kubernetes, Wiz researchers described the potential risk as an “IngressNightmare” in a blog post Monday. The most serious defect, an unauthenticated remote code execution vulnerability tracked as CVE-2025-1974, has a CVSS score of 9.8.

Security researchers told CyberScoop they aren’t aware of any active exploitation, but the risk for publicly exposed and unpatched Ingress Nginx controllers is extremely high. 

“The exploit chain is unauthenticated and a target is vulnerable in a default configuration,” Stephen Fewer, principal security researcher at Rapid7, said in an email. “With exploit code for CVE-2025-1974 starting to be published online, Kubernetes administrators should remediate publicly-exposed instances on an urgent basis.”

Ingress Nginx maintainers released patches for CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24513 and CVE-2025-24514 on Monday. Wiz reported CVE-2025-1974 and CVE-2025-24514 to Kubernetes on Dec. 31, 2024. 

Attackers can exploit CVE-2025-1974 and achieve unauthenticated remote code execution by chaining it to one of three high-severity configuration injection vulnerabilities: CVE-2025-1097, CVE-2025-1098 or CVE-2025-24514.

Successful exploitation could allow attackers to access cluster-wide secrets, including passwords or tokens,  or completely take over a cluster, Fewer said. 

Researchers are especially concerned about the potential risk of exploitation because Ingress Nginx Controller is so widely used across Kubernetes environments. 

The open-source tool is deployed in more than 2 in 5 Kubernetes clusters, according to Tabitha Sable, co-chair of SIG Security and member of the Kubernetes Security Response Committee. 

“When combined with today’s other vulnerabilities, CVE-2025-1974 means that anything on the pod network has a good chance of taking over your Kubernetes cluster, with no credentials or administrative access required,” Sable said in a blog post Monday.

The pod network is typically accessible to all workloads in a virtual private cloud and anyone connected to the corporate network, Sable added. “This is a very serious situation.”

Wiz researchers said about 43% of cloud environments, spanning more than 6,500 Kubernetes clusters, including some used by Fortune 500 companies, were potentially at risk of exploitation Monday. Censys scans found about 5,000 publicly exposed and potentially vulnerable hosts Tuesday.

Several public proof-of-concept exploit scripts for the vulnerabilities have appeared online, Fewer said. 

“Due to the root cause of the vulnerabilities being logic-based issues, these vulnerabilities are both relatively simple to exploit, and exploitation is expected to be reliable,” Fewer said. 

“An attacker must first identify an accessible and vulnerable Ingress Nginx controller in a target Kubernetes cluster, along with the admission controller service belonging to that Ingress controller,” he added. “Once a viable target has been identified, the difficulty in exploiting the target will be low.”

The post String of defects in popular Kubernetes component puts 40% of cloud environments at risk appeared first on CyberScoop.

from CyberScoop https://ift.tt/7SK6iNf
via IFTTT

The Importance of Secure Data Management Tools in Higher Education (+ 6 Best-Value Tools for Universities)

As a cybersecurity professional, you must stay abreast of the latest resources that help users protect and work with information. Such offerings are critical for the higher-education industry, which stores data related to students’ academic achievements, health records, financial aid details and more.

How Do Data Management Tools Improve the Higher-Education Industry?

Data management tools bring together information from separate distributed databases, creating a single source of truth about everything happening on campus. Authorized users can retrieve information, run reports and keep the content in a single secure location. 

These purposeful data management tools allow administrators to set access parameters that only allow people to work with information related to their duties or roles — vital to ensure student and faculty records remain secure and protected from cyberattacks. As cybercrime continue to increase in the education sector — an alarming increase of 75% between 2020 and 2021 — the need for secure platforms across all aspects of university life is more prevalent than ever.

Some data management tools standardize the content, making it more user-friendly, accessible and reliable. These products keep all the relevant information in one place, streamlining cybersecurity efforts and saving people time by preventing them from needing to remember login details for several separate tools.

Who Offers the Best-Value Data Management Tools for Universities? 

Cybersecurity professionals may bear the responsibility of determining who offers cost-effective data management tools that still provide exceptional security, especially as they assist their employers in the higher-education industry with handling progressively larger amounts of data while following best practices to protect it. 

While going through this process, they should remember that value encompasses many aspects. Although a reasonable cost may indicate good value, so can excellent scalability because it allows users to continue using the same products over time, even as their needs grow. Similarly, people may establish that a particular option provides excellent value because it includes numerous automated features that save them time and increase. That said, there are some standout providers of data management tools that provide valuable products to clients in the higher-education industry that you should know about and consider. 

1. Watermark 

The professionals at Watermark have spent the last two decades developing data management solutions that give users more time to learn from higher-education information and spend less time gathering it. Watermark’s Educational Impact Suite is an integrated tool hub that shows users their data in context and helps them make informed, big-picture conclusions. It’s purpose-built for higher education, offering features and capabilities to 

Whether the information relates to student retention, faculty reviews or course evaluations, the company’s data management tools can handle all that content and more, helping users extract strategic insights that increase success for students and the entire institution. 

Capture information about the entire student learning journey and use rubric-based juried assessments to efficiently measure learners’ outcomes at scale. This data management tool is just as robust from the faculty side of things, allowing users to take and store educators’ information once and use it infinitely. 

When it’s time to examine trends from the latest batch of student evaluations, Watermark’s solutions make it easy to convert those takeaways into the next actionable steps. The LMS integrations increase response rates, and the deep insights let people track patterns over time. 

Since the company offers cloud-based tools, authorized users can access them from anywhere. That user-friendliness minimizes friction, helping people retrieve the information they want and need at any time. Cybersecurity professionals also appreciate how Watermark’s centralized system simplifies the data landscape, reducing the number of access points for malicious parties to exploit. Together, these aspects make this company a worthy possibility for those seeking the best-value data management platforms for their universities. 

2. Ellucian

Ellucian offers solutions that address how many higher-education institutions have massive amounts of data but cannot use it effectively. Most people would agree that a platform offers excellent value if it allows them to do things with their internal information that were otherwise extremely challenging or impossible. Ellucian’s data management and analytics solutions assist during every stage, whether users need to consolidate files or analyze trends to cause strategic impacts. 

An internal analysis can also examine an institution’s level of data maturity and how it compares to industry standards. The results may show users that they retain specific files for too long or otherwise need to consider changing their policies. The findings could also give cybersecurity professionals more leverage if they have been trying to convince organizational leaders to alter related internal practices but have yet to convince them it is time to act. 

The platform can also provide customized recommendations linked to your organizational structure and strategic aims. Additionally, the powerful analytics capabilities turn higher-education institutions into data-driven organizations that can make decisions based on options that account for all stakeholders, whether students, educators or administrators. 

Something that puts Ellucian among companies offering best-value data management tools is its flexible approach to pricing. These solutions work as modular offerings, so people can bundle them as a suite or choose individually priced components to create a platform that works with their budgets and other needs. 

3. Informatica

Informatica empowers higher-education institutions with a cloud-based data management platform that helps users see unified views of individual students’ information and how they have progressed through their learning journeys. The associated insights allow people to improve overall experiences and personalized aspects. Since the platform compiles the content into a single, reliable source, the centralization makes cybersecurity professionals’ jobs easier by reducing the size of the potential attack surface. 

This data management platform also helps users achieve and maintain regulatory compliance because its features maintain the security and privacy of sensitive student information while providing total visibility and transparency. There are also tools to automate privacy management workflows and requests, reducing the manual interventions that can cause people to make mistakes.

Since Informatica has capabilities that let people share data smoothly and safely, parties can collaborate more effectively across business entities. These solutions keep cybersecurity tight while reducing the friction that can result when people cannot quickly access the information needed to do their jobs. 

If you already use other educational systems, Informatica integrates smoothly with many of them, whether the products are learning management systems or enterprise resource planning tools. Since this data management platform can sync information across multiple systems, people can rest assured that it will enhance interoperability and maintain accuracy.

Additionally, the platform’s integrated tools emphasize data security and governance by enabling anonymization, consent management and other necessities that help institutions continue to operate securely in an increasingly digital world. 

4. Edify

Edify is a data management platform from EAB for the higher education industry.  This product provides powerful storage capabilities to match the large and growing quantities of information users often work with daily. Since this product offers a cloud-native and secure data lake and warehouse, it helps organizations prioritize scalability and privacy while maintaining easy access for authorized parties. These cybersecurity-centered characteristics assist people in upholding best practices while seamlessly retrieving the data needed for their jobs. 

Edify also comes with numerous data governance features, thanks to a transparent model built specifically for the higher-ed industry. Customizable data and metadata definitions are available out of the box to support better usability and organization. The platform’s recordkeeping features also track individual students across their whole learning experience, no matter how many times they advance to new levels or begin additional programs. 

The self-service analytics capabilities enhance organizational decision-making and unlock efficiencies. Built-in support for low-or-no-code data analysis and reporting enables people to get more done without additional training, while compatibility with numerous business intelligence tools lets users create valuable data visualizations to see information in the appropriate context. 

This is an enterprise-grade solution hosted on AWS. Securely storing data in the cloud enables more than 99.9% uptime, giving users the confidence needed to know Edify will support their productivity and let them get a handle on growing amounts of data.

5. Own

Own is a software-as-a-service data management tool made for the education industry. Since it is a Salesforce product, this offering has the brand recognition that can reassure people they are choosing a reputable option. This solution also has specific features that keep Salesforce data safe. Challenges related to data protection, compliance and continuity can result when educational institutions migrate to the cloud. However, Own enhances security capabilities, supporting cybersecurity professionals in meeting or exceeding organizational goals. 

For example, the platform has automated backup and recovery tools for Salesforce content, helping organizations resume normal operations after accidental or malicious data loss occurs. This data management solution also streamlines compliance with data regulations for higher-education institutions. It facilitates the secure archiving of sensitive data, ensuring users can meet security and governance requirements while retaining the information’s integrity. 

If an administrator plans to use data for testing and development purposes, Own has integrated masking capabilities that support innovation while upholding privacy. Additionally, customized data retention policies and in-depth reporting capabilities make audit preparations more straightforward. 

Own also allows users to fill development sandboxes with accurate data, minimizing delays related to rework or other challenges. The improved efficiency makes workers more productive, ensuring they spend more time on value-added tasks instead of grappling with data-management obstacles. 

6. Komprise

Poor management of a higher-education institution’s unstructured data can be a costly problem. However, Komprise offers purposeful tools that help users identify, manage and categorize the information possessed and used by these organizations. 

Since this platform offers storage-agnostic data management, people can index, search through and use information regardless of its location. Additionally, Komprise always references the target storage device and retains files in the native format, ensuring the information keeps its complete context for better usability. 

Komprise also gives people a global file index within minutes of deployment, showing a unified view of all an organization’s data across storage environments. Such information is valuable from a cybersecurity perspective because it reveals whether a higher-education institution may have sensitive information stored in a database with inadequate safeguards against breaches or attacks. That visibility could encourage people to make prompt and strategic decisions that improve cybersecurity preparedness for the long term.

Additionally, Komprise’s intelligent data management features let people create customized storage policies across a university, whether by department or user groups. The platform also shows access trends, facilitating better decision-making and ensuring people can quickly access information when needed. 

When it’s time to move data, the built-in migration tools make it simple. They shift the information without disrupting hot data, user experiences or applications. Because this feature supports transitions to more cost-effective cloud tools, people may determine that Komprise is the best-value data management tool for universities they’ve come across that aligns with their budgets. 

Choosing Data Management Tools to Increase Value in Higher Education

These feature-filled data management tools will help those working in higher education tap into numerous value streams, whether because they can work more productively, increase how data-driven insights shape student progress or save costs through better data visibility and compliance. 

Cybersecurity professionals should create a list of must-have features in their desired tools and then see how closely the above solutions align with those requirements. That goal-oriented process will support people as they data management platforms that enhance  their workflows and cause operational success.

The post The Importance of Secure Data Management Tools in Higher Education (+ 6 Best-Value Tools for Universities) first appeared on Cybersecurity Insiders.

The post The Importance of Secure Data Management Tools in Higher Education (+ 6 Best-Value Tools for Universities) appeared first on Cybersecurity Insiders.

from Cybersecurity Insiders https://ift.tt/dZhBT7P
via IFTTT

Quantum-Proofing Enterprise Security: The Clock is Ticking

Many experts believe that quantum computing will arrive in the next decade. The unparalleled processing capabilities of these computers hold promise for advances in material science, drug discovery, artificial intelligence, environmental science, and much more. While quantum computing opens up the potential for exciting breakthroughs across sectors, these computers also pose a significant threat to widely used cryptography currently securing billions of devices and more than 80% of communications over the global internet.

Cryptographic algorithms like RSA and ECC, which secure much of the world’s digital communication and data, are particularly vulnerable to quantum attacks. A cryptographically relevant quantum computer (CRQC) is powerful enough to crack these encryption algorithms, rendering these systems obsolete and putting the security, privacy, and availability of sensitive data at risk.

With commercially viable quantum computers on the horizon, it is critical for all organizations to take steps NOW to quantum-proof enterprise security by migrating to post-quantum cryptography (PQC). 

No time to waste

Gartner predicts that by 2029, advances in quantum computing will render applications, data and networks protected by asymmetric cryptography unsafe and by 2034, quantum computing technologies will be able to fully break this cryptography.

IT leaders understand they are staring down the barrel of quantum threats. According to a DigiCert report, these leaders expressed concern about the timeframes in which to prepare with 41% saying that their organizations have less than five years to get ready.

While CRQCs are not a reality right now, quantum threats are. 

Cybercriminals are executing “hack now, decrypt later” attacks to harvest sensitive communications and data, storing this information until they can decrypt it once quantum technology becomes accessible. 

This underscores the critical necessity for tech leaders to rapidly transition to quantum-safe cryptography to ensure the confidentiality and integrity of systems, applications, and business communication.

Stay ahead of quantum threats

Organizations must start integrating quantum-resistant algorithms into their technology stacks now. To prepare for a post-quantum world and create a quantum-resilient future for their organizations, IT leaders should take the following proactive steps in their migration to PQC:

•Audit cryptographic assets

Take inventory of existing encrypted assets to identify all systems and applications that rely on public key cryptography. A comprehensive cryptographic inventory should include communication channels, email systems, servers, databases, VPNs, and security tools.

•Develop a transition plan

Create a PQC transition plan that prioritizes the organization’s most critical assets. This plan should include timelines with clear deadlines and a list of resources required for the transition including human, financial, and technological. Some of the most vulnerable systems include communication networks or cloud servers that contain sensitive data such as customer information or proprietary data. These can prove valuable starting points when beginning a full transition. 

•Build crypto-agility 

As enterprises begin the migration to PQC, it is important to design systems with cryptographic flexibility to adapt to new standards as they emerge. Building crypto agility like this will ensure that enterprises are able to switch to updated cryptographic algorithms without major operational disruptions.

•Leverage NIST resources

To help enterprises protect against quantum threats, the U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) released three PQC standards in August 2024. These standards provide a roadmap for securing a wide range of digital information including confidential business communication, e-commerce transactions, and more. NIST is encouraging IT administrators to start integrating these encryption standards into their systems immediately.

•Assess the supply chain

Organizations should contact their technology vendors to ask about their plans for transitioning to PQC. This discussion will help enterprises understand vendor quantum readiness and provide clarification on vendor plans and timelines for migrating to PQC.

•Make digital communication quantum-safe

With NetSfere’s mobile messaging platform, enterprises can ensure digital communication remains secure now and in the quantum era.

NetSfere’s industry leading post-quantum crypto-agile architecture sets a new standard for secure communications in the industry.

NetSfere is designed to meet future cryptographic challenges, in 2024 the company announced the integration of  NIST-recommended FIPS 203 ML-KEM with Kyber-1024 strength security.. This advanced post-quantum encryption ensures that NetSfere’s security remains resilient and robust, safeguarding enterprise data against the threats of today and the complex quantum threats of tomorrow.

Wrapping Up

It’s not a matter of if quantum threats will arrive, it is a matter of when. 

IT leaders must move PQC transition to the top of their priority lists to safeguard sensitive communication and data against quantum threats.

PwC noted that “by adopting quantum-resistant technologies, and fostering a culture of agility and preparedness, organizations can build the resilience necessary to safeguard their most essential assets. This isn’t just about a technological upgrade. It’s a strategic imperative for business survival.”

The clock is ticking. 

 

The post Quantum-Proofing Enterprise Security: The Clock is Ticking first appeared on Cybersecurity Insiders.

The post Quantum-Proofing Enterprise Security: The Clock is Ticking appeared first on Cybersecurity Insiders.

from Cybersecurity Insiders https://ift.tt/0Fj9pt3
via IFTTT

Detailed geographic information for all AWS Regions and Availability Zones is now available

Starting today, you can get more granular visibility of geographic location information for AWS Regions and AWS Availability Zones (AZs). This detailed information will help you choose the Regions and AZs that align with your regulatory, compliance, and operational requirements.

We continue to expand the AWS global infrastructure to meet your business requirements and now have 114 AZs across 36 Regions. We have announced plans to add 12 more AZs and four Regions in New Zealand, Kingdom of Saudi Arabia, Taiwan, and the AWS European Sovereign Cloud.

One of the things we’ve learned from our customers is the need to have more visibility into the specific location of infrastructure within an AWS Region. This is important for customers in highly regulated industries such as the financial industry or gaming, where there are specific requirements for the physical placement of infrastructure. For example, FanDuel, a leading sports gaming company based in the U.S., is scaling into new markets across the U.S. and Canada. They are taking advantage of the improved geographic transparency to make more informed decisions and ensure they’re meeting data residency requirements as they scale their business quickly.

Geographies for AWS Regions
To find the geographic information for your Region, you can visit the AWS Global Infrastructure Regions and Availability Zones page. Once you navigate to this page, you can choose any tab on the map and scroll to the bottom to review the geographic information for each Region. See the following image for an example showing the North America Regions. As would be expected, the infrastructure for the US West (Oregon) Region is located in the United States of America, and the Canada (Central) Region is located in Canada.

Geographies for Availability Zones
To find the specific geographic information for an AZ, you can visit the AWS Regions and Availability Zones page in AWS Documentation. Choose the Region you’re interested in and you’ll find a table showing you the geography for that Region. As you see in the following screenshot, the infrastructure of the AZ with AZ ID use1-az1 is located in Virginia, United States of America.

Geographies_AZs

Stay tuned
We will update these pages to reflect new geographic information as we continue to grow our AWS Global infrastructure footprint and add more AWS Regions and AZs.

Quick links
To learn more, visit the AWS Global Infrastructure Regions and Availability Zones page or AWS Regions and Availability Zones in AWS Documentation, and send feedback to AWS re:Post or through your usual AWS Support contacts.

Prasad


How is the News Blog doing? Take this 1 minute survey!

(This survey is hosted by an external company. AWS handles your information as described in the AWS Privacy Notice. AWS will own the data gathered via this survey and will not share the information collected with survey respondents.)

from AWS News Blog https://ift.tt/jerxb2d
via IFTTT