All news with #backup security tag

🔒 Google Cloud announces general availability of cross-region backups for its Backup and DR Service. This release decouples backup destinations from source regions, enabling backups to be stored in distinct geographic regions to improve resilience and meet data residency requirements. The capability is available now for Compute Engine instances, Disks, and Filestore, with Cloud SQL and AlloyDB support coming soon.

🛈 Microsoft released optional preview update KB5095093 for Windows 11 24H2 and 25H2, installing build 26100.8737 and introducing new features and bug fixes. The update offers a new Point-in-Time restore capability that captures VSS-based restore points for up to 72 hours and simplifies rollback of the OS, apps, and files. It also fixes a Recycle Bin filename confirmation bug and brings improvements across Secure Boot, Netlogon, File Explorer, Bluetooth, Widgets, accessibility, and networking.

🔁 Amazon FSx for OpenZFS now supports on-demand replication to and from AWS opt-in Regions, enabling incremental point-in-time snapshot transfers beyond default-enabled Regions. This feature simplifies disaster recovery, cross-account replication, and lower-latency global access while leveraging FSx for OpenZFS’s snapshots, cloning, and high throughput. Available wherever FSx for OpenZFS is offered, replication carries no extra FSx charge; standard inter-Region data transfer fees apply.

🔒 AWS Backup now supports Amazon EKS in the AWS European Sovereign Cloud (Germany) Region, providing fully managed, policy-driven data protection and recovery for EKS clusters. The service includes automated scheduling, retention management, immutable vaults, and cross-Region and cross-account copies. Customers can protect entire clusters, namespaces, or individual persistent volumes without agents, replacing custom scripts or third-party tools.

📣 Amazon Redshift now charges manual snapshot storage based on unique data blocks stored across snapshots rather than the full size of each snapshot. This change applies to Amazon Redshift Serverless and Amazon Redshift RG instances and reduces costs for customers who keep multiple manual snapshots. The billing model automatically applies to both existing and new manual snapshots in all AWS commercial and AWS GovCloud (US) Regions where these services are available. Customers can take more frequent snapshots to improve RPOs without incurring proportional cost increases.

🛡️ Amazon GuardDuty Malware Protection for AWS Backup now supports Amazon S3 continuous backups, enabling malware scanning across your continuous backup timeline. You can enable full or incremental scans within your backup plan and run on-demand scans up to any restorable point in time. The new GetPITRMalwareScanResults API lets you query scan status at a specific point in time to confirm a clean recovery point. Support is available in all Regions where GuardDuty Malware Protection for AWS Backup is offered, and you can enable it via the AWS Backup console, API, or CLI.

🔒 Modern ransomware campaigns routinely target backup infrastructure before launching encryption, leaving organizations without viable recovery despite having backups. The article details an attack sequence — initial access, credential theft, lateral movement, backup discovery and destruction, then encryption — and identifies recurring failures like weak isolation, overprivileged credentials, lack of immutability, and untested restores. It recommends identity separation, network segmentation, immutable storage, continuous monitoring, and regular recovery testing, and highlights Acronis Cyber Platform as an integrated example that combines backup, immutability, and threat detection to reduce complexity and improve resilience.

🚀 AWS Backup now completes Amazon EKS cluster state backups up to 10x faster. This improvement reduces backup windows for clusters with large numbers of namespaces and Kubernetes resources from days to hours and is automatically enabled at no additional cost in supported Regions. AWS Backup is a policy-based, fully managed solution to centralize and automate protection across compute, storage, and databases.

🔁 Amazon RDS for SQL Server now supports cross-account snapshot sharing for instances configured with additional storage volumes, allowing snapshots to preserve the original storage layout when shared, copied, or restored across accounts. This capability helps teams create isolated backup environments for compliance and to perform diagnostics by restoring snapshots in separate accounts. The feature is available today in all AWS commercial Regions via the Console, CLI, and SDKs.

🔁 Amazon RDS for SQL Server now supports creating read replicas for database instances that use additional storage volumes. Additional volumes let customers scale database storage up to 256 TiB by attaching up to three additional volumes of up to 64 TiB each, and replicas preserve the source instance's storage layout on creation. After the initial copy, administrators can manage additional volume configurations independently on source and replica instances. The feature is available in all AWS commercial Regions and AWS GovCloud (US) and can be accessed via the AWS Management Console, AWS CLI, or AWS SDKs.

🔔 AWS Backup now supports Amazon Aurora point-in-time recovery (PITR) in six additional AWS Regions: Malaysia, Thailand, Taipei, New Zealand, Canada West (Calgary) and Mexico (Central). The expansion enables policy-based data protection and time-based recovery for Aurora clusters via backup plans. To protect clusters, add them to an existing or new backup plan and ensure continuous backups or PITR are enabled on the relevant backup rule. Management is available via the AWS Backup console, CLI, or SDKs.

🛡️ AWS Backup now supports including Amazon Redshift Serverless namespaces and Amazon Aurora DSQL clusters directly as resource types in AWS Organizations backup policies. Organization administrators can create policy rules that explicitly target these resource types across member accounts rather than relying on tag-based selections or backing up all resources. The capability is available in all AWS Commercial and GovCloud Regions where AWS Backup and the services are offered. For implementation, consult the AWS Organizations backup policies documentation or use the AWS Backup console.

🛡️ This AWS Security Blog post demonstrates how to clone an AWS CloudHSM cluster across Regions using the copy-backup-to-region workflow and Client SDK 5 (recommended version 5.17 or later). It walks through creating and initializing a source cluster, generating a backup, copying that backup to a destination Region, and launching a new cluster from the copied backup, including certificate transfer and security group adjustments. The guide emphasizes that non-exportable keys can only be synchronized to cloned clusters, that users and passwords must be maintained manually after the initial backup, and that Client SDK 3 reached end-of-support on January 1, 2025, so migration to SDK 5 is required.

🛡️ Many businesses assume that backing up data equals protection, but backups alone do not sustain operations during outages. The article contrasts traditional backups, which enable post-incident restore, with BCDR solutions that keep systems running through failover and rapid recovery. It cites research showing recovery expectations often exceed real-world performance and recommends hybrid cloud strategies. Datto sponsors the piece and positions its BCDR tools for MSPs.

🔒 NAKIVO has released Backup & Replication v11.2, introducing an automated real-time replication engine and expanded hypervisor support. The update delivers full compatibility with VMware vSphere 9 and Proxmox VE 9.0 (with 9.1 in scope), plus immutable backups, pre-recovery malware scanning, and air-gapped options to strengthen ransomware resilience. v11.2 also adopts OAuth 2.0 for email notifications and upgrades core platform components to improve stability and recovery speed.

📁 AWS Backup now supports backup and restore for Amazon FSx for Windows File Server, FSx for OpenZFS, and FSx for Lustre in five additional Regions — Malaysia, Taipei, Thailand, Canada West (Calgary), and Mexico (Central). You can centrally manage FSx backup policies, automate schedules, and monitor backup activity through AWS Backup in those Regions. AWS Backup also supports cross‑Region and cross‑account copy of FSx backups across 14 Regions, available for on‑demand copies and scheduled copy rules. In opt‑in Regions, backups can be placed in logically air‑gapped vaults to help defend against accidental deletion and ransomware.

🔁 Amazon S3 Lifecycle now prevents expiration and transition actions on objects that failed replication, helping operators avoid unintended deletions or storage-class transitions when replication is misconfigured or lacks permissions. Objects that fail replication will be skipped by lifecycle rules until replication is corrected. After you fix replication configuration or permissions and run S3 Batch Replication to catch up, lifecycle will automatically process those objects according to your configured rules.

🔒 The 2026 State of the SOC Report, based on more than 909,000 alerts observed via the Adlumin MDR at the N-able SOC between March and December 2025, lays out five practical steps to preserve operations when attackers strike. It urges layered, defense-in-depth designs that combine identity, endpoint, network, cloud, and perimeter visibility rather than relying on single-point solutions. The guidance highlights automation and SOAR to move containment and remediation to machine speed, modernized endpoint and ITDR identity controls to detect credential abuse, validated immutable backups to enable rapid recovery, and rigorous oversight of AI-driven processes to manage emerging attack surfaces.

🔒 Amazon RDS for Oracle now supports cross-account snapshot sharing for database instances configured with additional storage volumes. Customers can create, share, and copy DB snapshots that preserve the original storage layout, including up to three attached volumes, across AWS accounts and Regions. Use cases include isolated backups for compliance and restoring snapshots in separate accounts for diagnostics, development, and testing. This capability is available today via the AWS Management Console, AWS CLI, and AWS SDKs.

🔒 Ransomware increasingly targets home backups and personal NAS units, using automated scans, weak credentials, and social engineering to encrypt photos, documents, and synced cloud folders. Once inside, malware removes Windows shadow copies, encrypts connected external drives and mapped network shares, and corrupts cloud sync clients so remote copies mirror the damage. Follow the updated 3-2-1-1 rule: keep an offline copy, unplug external backups after each use, enable cloud versioning, enforce strong passwords and firmware updates, and back up authenticator data. Also enable features like System Watcher, avoid pirated installers, and test restore procedures regularly.