Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

4 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 4 most recent headlines Filtered view
The Hacker News 1 month, 3 weeks ago

When Identity is the Attack Path

Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logged in, and the key stored itself automatically. Standard AWS behavior. No one misconfigured anything or violated a policy. Yet that single key, which was easily accessible to a minor-league attacker, could have opened a path to some 98% of entities in the company's cloud

The Hacker News 21 May 2026, 10:30 p.m. Amazon Web Services Cloud Credentials Microsoft Misconfiguration

A critical misconfiguration in Amazon Web Services (AWS) CodeBuild could have allowed complete takeover of the cloud service provider's own GitHub repositories, including its AWS JavaScript SDK, putting every AWS environment at risk

The Hacker News 16 Jan 2026, 8:31 a.m. Amazon (company) Amazon Web Services Cloud Disclosure Exposure Fixed Github JavaScript Misconfiguration Service Provider Supply Chain Vulnerability

Cybersecurity researchers have disclosed details of a new botnet that customers can rent access to conduct distributed denial-of-service (DDoS) attacks against targets of interest

The Hacker News 23 Sep 2025, 11:26 p.m. Amazon (company) Amazon Web Services Botnet Cloud Containers Darktrace Disclosure Docker DoS Exploit Infection Malware Misconfiguration Research Virtualisation