Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
The threat actor known as PCPJack has hijacked cloud servers associated with Amazon Web Services (AWS), Google Cloud, and Microsoft Azure to create a covert SM…
Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) that has racked up thousands of downloads for over three years…
New 'ALBeast' Vulnerability Exposes Weakness in AWS Application Load Balancer
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
New 'ALBeast' Misconfiguration Exposes Weakness in AWS Application Load Balancer
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
Legion Malware Upgraded to Target SSH Servers and AWS Credentials
An updated version of the commodity malware called Legion comes with expanded features to compromise SSH servers and Amazon Web Services (AWS) credentials asso…
AWS, CrowdStrike, Presidio Join Hands To Develop Ransomware Mitigation Kit
Given the increasing incidents of ransomware attacks, multiple tech giants have joined hands to develop…AWS, CrowdStrike, Presidio Join Hands To Develop Ransom…
Vulnerabilities In Amazon Alexa Could Leak Users' Sensitive Data To Hackers
Researchers have found numerous security vulnerabilities affecting the home assistant Amazon Alexa. Exploiting the vulnerabilities could leak sensitive details…
Vulnerabilities In Amazon Alexa Could Leak Users' Sensitive Data To Hackers - Bugs Fixed
Researchers have found numerous security vulnerabilities affecting the home assistant Amazon Alexa. Exploiting the vulnerabilities could leak sensitive details…
Rootkit in the Cloud: Hacker Group Breaches AWS Serve
A sophisticated hacker group pwned Amazon Web Services (AWS) servers, set up a rootkit that let them remotely control servers, then merrily funnelled sensitive…
Amazon's Ring blamed hacks on consumers reusing their passwords. A lawsuit says that's not tru
Are you an Amazon Ring user? Plaintiffs suing the company say they created unique passwords but were hacked anyway, and that Ring'sÂdevices lack widely adopted…
Amazon's Ring Video Doorbell Lets Attackers Steal Your Wi-Fi Password
Security researchers at Bitdefender have discovered a high-severity security vulnerability in Amazon's Ring Video Doorbell Pro devices that could allow nearby …
Imperva Breach Update: Stolen AWS API Key Triggered The Breach
It has been over a month since the cybersecurity firm Imperva suffered a breach, we now have an update. AsImperva Breach Update: Stolen AWS API Key Triggered T…
SUSE amazon-ssm-agent Major DoS Credential Leak Vulnerability 2026-2467-1
An update that solves 21 vulnerabilities and contains one feature can now be installed.
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim's clo…
Linus Torvalds rejects 'beyond stupid' AWS-made Linux patch for Intel CPU Snoop atta
After much debate, Linus Torvalds has rejected a controversial patch to address potential leaks of secrets from a CPU's cores.
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting a recently disclosed critical security flaw in Cisco Secure …
Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks
Threat actors have been observed abusing Amazon S3 (Simple Storage Service) Transfer Acceleration feature as part of ransomware attacks designed to exfiltrate …
The Rise of S3 Ransomware: How to Identify and Combat It
In today's digital landscape, around60%of corporate data now resides in the cloud, with Amazon S3 standing as the backbone of data storage for many major corpo…
New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries
In what's a new kind of software supply chain attack aimed at open source projects, it has emerged that threat actors could seize control of expired Amazon S3 …
Hackers Use Cloud Services to Distribute Nanocore, Netwire, and AsyncRAT Malware
Threat actors are actively incorporating public cloud services from Amazon and Microsoft into their malicious campaigns to deliver commodity remote access troj…
Bugs in Managed DNS Services Cloud Let Attackers Spy On DNS Traffic
Cybersecurity researchers have disclosed a new class of vulnerabilities impacting major DNS-as-a-Service (DNSaaS) providers that could allow attackers to exfil…
Several High-Profile Accounts Hacked in the Biggest Twitter Hack of All Time
Social media platform Twitter, earlier today on Wednesday, was on fire after it suffered one of the biggest cyberattacks in its history.A number of high-profil…
NextMotion Leaked Sensitive Plastic Surgery Images Online Via an Unsecured Database
Researchers from vpnMentor have discovered another unsecured database exposing sensitive details about users. As reported, they discovered an unprotected Amazo…
Saudi Prince Allegedly Hacked World's Richest Man Jeff Bezos Using WhatsApp
The iPhone of Amazon founder Jeff Bezos, the world's richest man, was reportedly hacked in May 2018 after receiving a WhatsApp message from the personal accoun…