AWS

There is a lot of new information about Amazon Web Services (AWS) in this section. This includes news about new services, features, and inventions, as well as tips on how to do things right, security changes, and case studies. Keep up with how AWS is changing cloud computing, how businesses are using these technologies to grow and become more efficient, and how AWS is affecting industry trends.

AWS Fixes AI Agent Flaws Enabling Authentication Bypass and Credential Theft

AWS released security updates for three vulnerabilities in its open-source Loom platform, used for AI agent orchestration. These vulnerabilities could…

1 month ago

TIKTOUK WordPress Toolkit Could Enable AWS, SMTP and API Credential Theft Attacks

A credential-collection toolkit dubbed TIKTOUK that combines WordPress reconnaissance, exposed-file harvesting, plugin credential decryption, and JavaScript secret scanning. The toolkit…

1 month ago

Marimo RCE Flaw Lets Hackers Steal AWS Credentials and Pivot to Bastion Host in 8 Seconds

A threat actor exploited a critical pre-authentication remote code execution vulnerability in marimo to harvest AWS credentials, retrieve an SSH…

2 months ago

Mass Scanning Targets Exposed Vite Servers to Steal AWS Keys and Azure Tokens

In August 2026, automated threat activity targeting exposed Vite development servers increased significantly. Attackers aimed to extract cloud credentials, environment…

2 months ago

LLMjacking Attack Abuses Leaked AWS Credentials to Hijack Amazon Bedrock AI Models

Threat actors are increasingly converting stolen cloud credentials into access to costly generative AI services, a technique known as LLMjacking.…

2 months ago

Hackers Hide Reverse Shell Traffic Behind Signed Apps and AWS API Gateway

Threat actors are using a layered fake IT-support campaign to obtain remote access, deploy a malicious MSI package and conceal…

2 months ago

Hackers Exploit Critical Langflow and Ruby on Rails Flaws in Active RCE Attacks

Threat actors are actively exploiting two newly disclosed remote code execution vulnerabilities affecting Langflow and Ruby on Rails. These campaigns…

2 months ago

Hackers Launch Password Spraying Attacks Against AWS Root Accounts at 150+ Organizations

Research has discovered a password-spraying campaign targeting AWS root user accounts across more than 150 organizations. This highlights ongoing efforts…

2 months ago

AWS Security Teams Can Correlate CloudTrail, VPC and Route 53 Logs to Detect Attacks

AWS security teams can improve detection of multi-stage intrusions by correlating API activity in CloudTrail with network metadata in VPC…

2 months ago

28,000 Exposed .git Repositories Leak Active AWS, OpenAI, Stripe and GitHub Credentials

A large-scale internet scan has uncovered 28,000 publicly accessible .git repositories exposing credentials for AWS, OpenAI, Stripe, GitHub, and other…

2 months ago