Application Security
After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities.
Hi, what are you looking for?
SecurityWeek
All posts tagged "AWS"
Cloud Security
Two AWS data centers in the United Arab Emirates were “directly struck” and another facility in Bahrain was also damaged after a drone landed...
Cloud Security
The AWS Security Hub Extended plan aims to reduce security tool sprawl by correlating findings across multiple security domains.
Network Security
Threat actors relying on AI have been exploiting exposed ports and weak credentials to take over FortiGate devices.
Cloud Security
AWS and cybersecurity vendors have made several announcements at the cloud giant’s re:Invent 2025 event.
Cloud Security
AWS has addressed a vulnerability that could have been leveraged to bypass Trusted Advisor’s S3 bucket permissions check.
Application Security
150 abandoned Amazon S3 buckets could have been leveraged to deliver malware or backdoors to governments and Fortune companies.
Ransomware
A ransomware group tracked as Codefinger is using compromised AWS keys to encrypt S3 bucket data using SSE-C.
Cloud Security
AWS has launched Security Incident Response, a new service for quick and efficient security event management.
Phishing
AWS announced the seizure of domains used by Russian hacker group APT29 in phishing attacks targeting Ukraine and other countries.
Cloud Security
As many as 15,000 applications using AWS Application Load Balancer (ALB) could be exposed to ALBeast attacks.
Cloud Security
Security researchers at Palo Alto Networks discover a threat actor extorting organizations after compromising their cloud environments using inadvertently exposed environment variables.
Cloud Security
AWS has patched vulnerabilities in several products, including flaws that could have been exploited to take over accounts.
Artificial Intelligence
AWS says a massive neural network graph model with 3.5 billion nodes and 48 billion edges is speeding up the prediction and detection of...
Cloud Security
AWS announced passkey MFA for IAM and root users, IAM Access Analyzer updates, and Amazon GuardDuty Malware Protection for S3.
Cloud Security
SecurityWeek speaks to Tom Scholl, VP and distinguished engineer at AWS, on how the organization tackles IP Spoofing and DDoS attacks.
Cybercrime
The tool, called FBot, is capable of credential harvesting for spamming attacks, and AWS, PayPal and SaaS account hijacking.
Cloud Security
AWS announces Amazon One Enterprise, a palm-based identity service that enables users to easily access physical locations and digital assets.
Cloud Security
AWS says an internal threat intel decoy system called MadPot has successfully trapped nation state-backed APTs like Volt Typhoon and Sandworm.
Funding/M&A
Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa.
Vulnerabilities
Malware & Threats
Artificial Intelligence
Artificial Intelligence
Hacker Conversations
Fraud & Identity Theft
Artificial Intelligence
Vulnerabilities
