AWS

CISA Admin Reportedly Exposes AWS GovCloud Credentials in Public GitHub Repository

A significant security lapse involving the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has come to light after a contractor…

6 months ago

Shai-Hulud Worm Steals Dev Secrets Across npm, GitHub, AWS & Kubernetes

Shai-Hulud is a major cybersecurity threat targeting the open-source software supply chain. Security researchers are raising alarms over “Shai-Hulud,” a…

6 months ago

170 npm Packages Hijacked to Steal GitHub, AWS & Kubernetes Secrets

Hackers have launched a large-scale supply chain attack by compromising more than 170 npm packages and two PyPI libraries, collectively…

6 months ago

AWS Fixes Severe RCE, Privilege Escalation Flaws in Research and Engineering Studio

AWS recently issued a critical security bulletin addressing severe vulnerabilities in its Research and Engineering Studio (RES). RES is an…

7 months ago

European Commission Confirms Cyberattack After AWS Account Breach

The European Commission has confirmed a cybersecurity incident affecting its cloud-based infrastructure after attackers gained access to an Amazon Web…

7 months ago

AWS Bedrock AgentCore Sandbox Bypass Enables Stealthy C2 and Data Exfiltration

A newly disclosed vulnerability in AWS Bedrock AgentCore Code Interpreter allows threat actors to bypass network isolation and establish stealthy…

8 months ago

UNC6426 Hackers Exploit NPM Package to Gain AWS Admin Access in 72 Hours

UNC6426 hackers turned a routine NPM update into a direct path to full AWS administrator access in under 72 hours,…

8 months ago

Middle East AWS Outage Sends Shockwaves Through Cloud Infrastructure Service

A severe infrastructure incident in the Middle East has triggered a massive Amazon Web Services (AWS) outage, disrupting critical cloud…

8 months ago

AWS Console Supply Chain Breach Enables GitHub Repository Hijacking

Wiz Research has uncovered CodeBreach, a critical vulnerability in AWS CodeBuild CI/CD pipelines that could have enabled the complete takeover…

10 months ago

Attackers Abuse AWS IAM’s Eventual Consistency to Maintain Stealthy Persistence

A critical exploitation technique that allows attackers to maintain access to AWS environments even after credentials are revoked. The vulnerability…

11 months ago