Latest news with #vCenter
Arabian Post
2 days ago
- Business
- Arabian Post
Amazon Expands Cloud Services with VMware Integration
Amazon Web Services has launched the Amazon Elastic VMware Service, marking a significant step in its cloud offerings. This new service allows businesses to seamlessly run and scale VMware-based workloads on AWS infrastructure. By integrating VMware environments with AWS, organisations can leverage the cloud without needing to replatform or refactor their existing workloads. This innovation is aimed at simplifying cloud migration and operations for businesses relying on VMware technologies, particularly those seeking to reduce infrastructure costs and enhance scalability. Amazon EVS was designed to address a growing demand for hybrid cloud solutions that combine on-premises infrastructure with the flexibility and scalability of the cloud. Traditionally, businesses using VMware for on-premises data centre operations faced challenges in integrating these environments with public cloud resources. This led to complex migrations and time-consuming transitions, hindering the potential for cloud adoption. With the new AWS offering, enterprises can now manage VMware workloads natively within AWS's secure and resilient environment, making it easier for them to benefit from the cloud's dynamic capabilities. A key feature of Amazon EVS is its ability to support existing VMware tools and workflows. This allows IT teams to continue using the same processes and procedures they've grown accustomed to while expanding into the cloud. VMware vSphere, vCenter, and vSAN, among other VMware components, are directly integrated into AWS, offering customers a familiar interface and management experience. Additionally, the service provides full compatibility with AWS-native services such as Amazon EC2, Amazon S3, and AWS Lambda, enabling organisations to extend their existing VMware workloads into a broader cloud ecosystem. ADVERTISEMENT The introduction of Amazon EVS comes at a time when many businesses are adopting multi-cloud strategies to avoid vendor lock-in and increase operational flexibility. With a multi-cloud approach, organisations can choose from a variety of cloud providers while ensuring their workloads remain portable and integrated. Amazon EVS facilitates this by offering seamless interconnection between on-premises VMware environments and AWS, enabling smoother hybrid cloud deployments. This is particularly valuable for organisations that have complex data sovereignty requirements or need to maintain certain workloads on-premises due to compliance regulations. In addition to hybrid cloud capabilities, the service addresses the growing demand for disaster recovery solutions. By enabling businesses to run their VMware workloads on AWS, Amazon EVS provides an efficient, scalable, and cost-effective way for companies to implement disaster recovery strategies in the cloud. With AWS's global infrastructure, businesses can replicate their critical VMware workloads across multiple regions, ensuring business continuity and reducing the risk of downtime during unforeseen events. The launch of Amazon EVS is a response to the increasing need for enterprise solutions that bridge on-premises and cloud environments. According to industry analysts, many businesses are still hesitant to fully migrate their VMware workloads to the cloud due to concerns over compatibility, security, and control. Amazon's offering directly addresses these concerns by providing a managed service that integrates with existing VMware tools, ensuring security and compliance while offering the flexibility of AWS's cloud platform. AWS's entry into the VMware market is also a significant move in the cloud competition. While VMware has its own cloud offering, the new Amazon service competes directly with solutions from other cloud giants, including Microsoft Azure and Google Cloud, which have long integrated VMware capabilities into their platforms. However, AWS's extensive infrastructure and strong presence in the enterprise market give Amazon a competitive edge, particularly among businesses already using AWS for other cloud services. As AWS continues to expand its portfolio of cloud services, the introduction of Amazon EVS positions the company as a key player in the hybrid and multi-cloud space. With its ability to run VMware workloads natively on AWS, the service is expected to appeal to businesses that wish to retain control over their legacy applications while enjoying the benefits of cloud infrastructure. ADVERTISEMENT The potential applications of Amazon EVS extend beyond disaster recovery and hybrid cloud deployments. Organisations in industries such as healthcare, finance, and manufacturing, which rely heavily on VMware for critical business functions, can benefit from the enhanced security, scalability, and resilience provided by AWS. These sectors, known for their stringent regulatory requirements and need for high availability, will find Amazon EVS an attractive option for modernising their infrastructure while maintaining operational continuity.
Business Wire
24-07-2025
- Business
- Business Wire
Sygnia Uncovers Active Chinese-Nexus Threat Actor Targeting Critical Infrastructure
SINGAPORE & TEL-AVIV, Israel & NEW YORK--(BUSINESS WIRE)-- Sygnia, the foremost global cyber readiness and response team, today reveals the findings of their investigation into a prolonged espionage campaign by a China-nexus threat actor, targeting critical infrastructure. Named 'Fire Ant' by Sygnia, the adversary is actively leveraging advanced methods to gain access to virtualization and networking environments by creating multi-layer attack kill chains to infiltrate restricted and segmented network assets that were considered to be within isolated environments. Since early 2025, Sygnia has tracked and responded to Fire Ant incidents, primarily targeting VMware ESXi and vCenter environments, as well as network appliances, to establish a foothold for initial access and long-term advanced persistence. Notably, Fire Ant displays high levels of resilience, actively and stealthily adapting to eradication and containment efforts, replacing toolsets, deploying redundant persistence backdoors and manipulating network configurations to re-establish access to compromised devices. 'Fire Ant shows incredible advanced capabilities to infiltrate and conduct espionage campaigns, avoiding detection and multi-layered traditional security measures by targeting infrastructure blind spots. This highlights the level of resilience and danger posed by nation-state threat actors to global critical infrastructure organisations,' said Yoav Mazor, Head of Incident Response, APJ at Sygnia. 'By gaining control over the virtualization management layer, the threat actor was able to extract service account credentials and deploy persistent backdoors on both ESXi hosts and the vCenter to maintain access across reboots.' Fire Ant's activities are characterized by infrastructure-centric tactics, techniques and procedures (TTPs) enabling activity beneath the detection threshold of traditional endpoint controls, emphasizing critical blind spots of conventional security stacks. The threat actor establishes control over a victim's VMware ESXi hosts and vCenter servers to move laterally across an organization. Additionally, Fire Ant consistently bypassed network segmentation by compromising network appliances and tunneling across segments, enabling the threat actor to bridge and move deeper within an organization's infrastructure through legitimate, approved paths. Mazor adds, 'Fire Ant's method of infiltration places heightened pressure on the cybersecurity community and underscores the importance of visibility and detection within the hypervisor and infrastructure layer where traditional endpoint security tools often struggle to identify malicious activity. Organizations will need to adopt proactive cyber resilience with an advanced multi-layered security approach.' As part of Sygnia's investigation into Fire Ant, the company found the tooling and techniques closely align with prior espionage campaigns conducted by nation-state threat actor, UNC3886, currently active in Singapore. Fire Ant's overlap with UNC3886 includes specific binaries and exploitation of vCenter and ESXi vulnerabilities, as well as similar targeting of critical infrastructure across regions. For a deep dive account of the incident, please see Sygnia's report. About Sygnia Sygnia is the world's foremost cyber response and readiness expert. It applies creative approaches and bold solutions to each phase of an organization's security journey, meeting them where they are to ensure cyber resilience. Sygnia is the trusted advisor and service provider of leading organizations worldwide, including Fortune 100 companies. Sygnia is a Temasek company, part of the ISTARI Collective.
