Amazon Web Services (AWS) is a cloud platform whose configurations, vulnerabilities, and security advisories can affect hosted data and systems.
Search across headline titles and summaries.
Background for this topic.
Amazon Web Services (AWS) is a cloud platform offering on-demand computing, storage, databases, networking, and managed services. Organizations use it to run applications and process data without operating the underlying physical infrastructure. Security reporting under this tag may concern AWS service flaws, its infrastructure, or weaknesses in customer-configured environments.
AWS follows a shared-responsibility model: AWS secures the cloud infrastructure, while customers must secure identities, data, configurations, and workloads. Material risks include overly broad IAM permissions or stolen credentials, publicly exposed storage or network services, and unpatched virtual machines, containers, or application interfaces. Effective defenses include least-privilege access, encryption, configuration review, timely patching, and centralized audit logging through services such as CloudTrail. Those logs and related telemetry support detection and investigation, while predefined procedures can revoke credentials, isolate workloads, and preserve evidence when an account or resource is compromised.
Weekly headline count for the current query.
CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository
Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities
The European Commission has revealed details of a data breach impacting its AWS infrastructure
Notorious ransomware group Interlock has been exploiting a Cisco zero-day bug since January, AWS says
DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data
A critical AWS CodeBuild misconfiguration has exposed core repositories to potential attack
Amazon Web Services has launched its Cyber Education Grant Program in the UK
Hackers exploited AWS misconfigurations, leaking 2TB of sensitive data, including customer information, credentials and proprietary source code
Orca Security said the issue mirrors a previously identified vulnerability in Azure CLI
2922 projects contained at least one unique secret, including from AWS, Redis and Google
Cloud giant debunks common misconceptions
Move is designed to mitigate risk of account takeover
Mitiga’s research demonstrated two potential attack scenarios
AWS VP Adolfo Hernandez will replace Jon Lewis as CEO
Harvesting API keys and secrets from AWS SES, Microsoft Office 365 and other services
Researchers warned that threat actors could potentially exploit Elastic IP transfer and compromise an IP address
Roughly 50% of all the apps analyzed were seen using the same AWS tokens found in other apps
The software engineer intended to mine the stolen data and install cryptocurrency miners on some AWS servers
Misconfigured AWS bucket to blame for privacy snafu
Study uncovers 200,000 such assets across 35 vendors