With more than 4 million weekly downloads, the Nx build platform became the first known supply chain breach where hackers weaponized AI assistants for data theft. Hackers stole thousands of ...

AWS power users often possess multiple IAM accounts with which they execute terminal commands and CLI operations. For example, an AWS developer might rely on separate accounts to manage Kubernetes ...

Cybersecurity researchers have discovered risky default identity and access management (IAM) roles impacting Amazon Web Services that could open the door for attackers to escalate privileges, ...

Amazon Web Services Inc. today released Strands Agents SDK, an open-source toolkit for developing artificial intelligence agents. The project’s code is available on GitHub. AWS originally created ...

A targeted campaign exploited Server-Side Request Forgery (SSRF) vulnerabilities in websites hosted on AWS EC2 instances to extract EC2 Metadata, which could include Identity and Access Management ...

Regula has announced comprehensive support for Digital Travel Credentials (DTCs) in its latest Document Reader SDK update, implementing features that meet International Civil Aviation Organization ...

Cybercriminals have begun to encrypt data held in Amazon storage tools used by thousands of organizations around the globe. Researchers with the cybersecurity firm Halcyon documented a recent trend of ...

Misconfigured cloud instances have once again been abused to steal sensitive information such as login credentials, API keys, and more. This time around, the victims were countless Amazon Web Services ...

Cybercriminal gangs have exploited vulnerabilities in public websites to steal Amazon Web Services (AWS) cloud credentials and other data from thousands of organizations, in a mass cyber operation ...

Russia's premiere advanced persistent threat group has been phishing thousands of targets in militaries, public authorities, and enterprises. "APT29 embodies the 'persistent' part of 'advanced ...

Multiple popular mobile applications for iOS and Android come with hardcoded, unencrypted credentials for cloud services like Amazon Web Services (AWS) and Microsoft Azure Blob Storage, exposing user ...

Massive NHI Attack: Insecure AWS Stored Credentials Lead to Compromise of 230 Million Cloud Environments. Researchers from Unit 42 have uncovered a sophisticated and large-scale cyberattack targeting ...