Amazon AWS

HazyBeacon Abuses AWS Lambda Function URLs for Stealthy Command-and-Control Operations

HazyBeacon is a stealthy cloud-native malware campaign identified as CL-STA-1020. It is exploiting Amazon Web Services (AWS) Lambda Function URLs…

4 months ago

AWS Launches Continuum to Detect and Fix Code Vulnerabilities at Machine Speed

AWS has introduced “Continuum,” a new security capability designed to detect, validate, and remediate code vulnerabilities at machine speed, signaling…

4 months ago

Attackers Exploit Cloud Logging Platforms to Hide Malicious Activity

Attackers are increasingly targeting cloud logging platforms to evade detection and maintain persistent visibility into compromised environments. The report highlights…

4 months ago

CISA Admin Reportedly Exposes AWS GovCloud Credentials in Public GitHub Repository

A significant security lapse involving the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has come to light after a contractor…

5 months ago

Amazon Quick Security Flaw Allowed Restricted Users to Access AI Chat Agents

A newly disclosed security flaw in Amazon’s AI-powered business intelligence platform has revealed how restricted users could quietly bypass controls…

5 months ago

AWS Fixes Severe RCE, Privilege Escalation Flaws in Research and Engineering Studio

AWS recently issued a critical security bulletin addressing severe vulnerabilities in its Research and Engineering Studio (RES). RES is an…

6 months ago

AWS Bedrock AgentCore Sandbox Bypass Enables Stealthy C2 and Data Exfiltration

A newly disclosed vulnerability in AWS Bedrock AgentCore Code Interpreter allows threat actors to bypass network isolation and establish stealthy…

7 months ago

AWS-LC Flaw Exposes Amazon Users to Attacks by Bypassing Certificate Chain Validation

Amazon issued a critical security bulletin (2026-005-AWS) detailing three high-severity vulnerabilities in AWS-LC, its open-source cryptographic library. Discovered through a…

8 months ago

Middle East AWS Outage Sends Shockwaves Through Cloud Infrastructure Service

A severe infrastructure incident in the Middle East has triggered a massive Amazon Web Services (AWS) outage, disrupting critical cloud…

8 months ago

AWS Console Supply Chain Breach Enables GitHub Repository Hijacking

Wiz Research has uncovered CodeBreach, a critical vulnerability in AWS CodeBuild CI/CD pipelines that could have enabled the complete takeover…

9 months ago