Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Serious Attacks Could Have Been Staged Through This Amazon ECR Public Gallery Vulnerability
A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could have been potentially exploited to stage a mul…
Red Hat Expands Expansion of its Open Solutions on AWS
Red Hat announced an expansion of its open solutions publicly available in AWS Marketplace, a digital catalogue with thousands of software listings from indepe…
Researchers Detail AppSync Cross-Tenant Vulnerability in Amazon Web Services
Amazon Web Services (AWS) has resolved a cross-tenant vulnerability in its platform that could be weaponized by an attacker to gain unauthorized access to reso…
New Open-Source Tool Scans Public AWS S3 Buckets for Secrets
A new open-source 'S3crets Scanner' scanner allows researchers and red-teamers to search for 'secrets' mistakenly stored in publicly exposed or company's Amazo…
Ubuntu Is Now Available on AWS
Amazon Web Services (AWS) users get access to the popular Linux distro via virtual desktop.
Authentication Bypass Bug Found In AWS IAM Authenticator for Kubernetes
A severe security bug existed in the AWS IAM Authenticator for Kubernetes. Exploiting this vulnerability…Authentication Bypass Bug Found In AWS IAM Authenticat…
High-Severity Vulnerability Found In Amazon Photos Android App
Researchers discovered a severe security vulnerability in the Android Photos app that exposed Amazon access…High-Severity Vulnerability Found In Amazon Photos …
SUSE: 2022:96-1 caasp/v4/velero-plugin-for-aws Security Upda
The container caasp/v4/velero-plugin-for-aws was updated. The following patches have been included in this update:
AWS, CrowdStrike, Presidio Join Hands To Develop Ransomware Mitigation Kit
Given the increasing incidents of ransomware attacks, multiple tech giants have joined hands to develop…AWS, CrowdStrike, Presidio Join Hands To Develop Ransom…
AWS commits to update its own Linux every other ye
Amazon Web Services has announced that it will release an updated version of its own Linux every two years, starting with Amazon Linux 2022, which it is previe…
Amazon Rolled Out End-to-End Encryption For Ring Devices Globally
Almost a year after initially launching the service as beta, Amazon has now released end-to-end…Amazon Rolled Out End-to-End Encryption For Ring Devices Global…
Amazon devices will soon automatically share your Internet with neighbo
Amazon's experiment wireless mesh networking has turned users into guinea pigs. If you use Alexa, Echo, or any other Amazon device, you have only 10 days to op…
SUSE: 2021:220-1 caasp/v4.5/velero-plugin-for-aws Security Upda
The container caasp/v4.5/velero-plugin-for-aws was updated. The following patches have been included in this update:
11 Useful Security Tips for Securing Your AWS Environment
Want to take advantage of excellent cloud services? Amazon Web Services may be the perfect solution, but don't forget about AWS security.Whether you want to us…
Researchers Found Amazon Alexa Can Acquire Malicious Skills ' Amazon Rebuts
While Amazon Alexa skills facilitate users in their day-to-day activities, this personal assistant can go…Researchers Found Amazon Alexa Can Acquire Malicious …
ALERT: Malicious Amazon Alexa Skills Can Easily Bypass Vetting Process
Researchers have uncovered gaps in Amazon's skill vetting process for the Alexa voice assistant ecosystem that could allow a malicious actor to publish a decep…
Bottlerocket: Amazonà¢ÂÂs Open Source Container Linux Distribution Now Availab
Bottlerocket - Amazon's long anticipated open-source container Linux distro - is now available! Bottlerocket lets you host and run containers like Kubernetes o…
Amazon Alexa Bugs Could've Let Hackers Install Malicious Skills Remotely
Attention! If you use Amazon's voice assistant Alexa in you smart speakers, just opening an innocent-looking web-link could let attackers install hacking skill…
Vulnerabilities In Amazon Alexa Could Leak Users' Sensitive Data To Hackers
Researchers have found numerous security vulnerabilities affecting the home assistant Amazon Alexa. Exploiting the vulnerabilities could leak sensitive details…
Vulnerabilities In Amazon Alexa Could Leak Users' Sensitive Data To Hackers - Bugs Fixed
Researchers have found numerous security vulnerabilities affecting the home assistant Amazon Alexa. Exploiting the vulnerabilities could leak sensitive details…
Amazon Alexa Bugs Allowed Hackers to Install Malicious Skills Remotely
Attention! If you use Amazon's voice assistant Alexa in you smart speakers, just opening an innocent-looking web-link could let attackers install hacking skill…
AWS launches Bottlerocket, a Linux-based OS for container hosti
AWS hasÂlaunchedÂits own open-source operating system for running containers on both virtual machines and bare metal hosts.ÂBottlerocket, as the new OS is call…
Rootkit in the Cloud: Hacker Group Breaches AWS Serve
A sophisticated hacker group pwned Amazon Web Services (AWS) servers, set up a rootkit that let them remotely control servers, then merrily funnelled sensitive…
Amazon Engineer: 'Ring should be shut down immediately and not brought bac
Are you an Amazon Ring user? An Amazon software engineer named Max Eliaser is calling for the shutdown of Ring, the doorbell camera company Amazon paid $2 bill…