A critical path traversal vulnerability in Amazon EC2 SSM Agent has been patched that could have allowed attackers to gain root privileges on affected systems. The flaw in the "ValidatePluginId" function failed to properly sanitize input, enabling attackers to inject path traversal sequenc...
A critical AWS vulnerability named "whoAMI" allows attackers to exploit misconfigured AMI selection processes, potentially gaining unauthorized access to AWS accounts through malicious Amazon Machine Images. The flaw affects approximately 1% of monitored organizations, primarily impacting ...
A newly discovered ransomware campaign targets Amazon S3 buckets by exploiting AWS's Server-Side Encryption feature. Attackers use compromised credentials to encrypt data with custom AES-256 keys, making recovery impossible without ransom payment. The operation, attributed to "Codefinger,"...
A large-scale phishing campaign dubbed "HubPhish" is targeting European manufacturing companies' Azure cloud infrastructure, affecting over 20,000 users. The operation uses HubSpot's Free Form Builder to create convincing Docusign-themed phishing emails that steal Office 365 credentials th...
