Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE amazon-ecs-init Moderate Access Risk Vuln 2026-11345-1
An openSUSE Tumbleweed update for amazon-ecs-init addresses a vulnerability, CVE-2026-56852, rated moderate, with various CVSS scores indicating severity and i…
Shark Vacuum Vulnerability Lets Attackers Hijack Cameras Across an Entire AWS Region
A researcher found that anyone with physical access to one Shark robot vacuum can extract its AWS IoT certificate and use it to take over other Shark vacuums r…
openSUSE aws-nitro-enclaves-cli Important Multiple Risks Fix 2026-21406-1
openSUSE released a security update for aws-nitro-enclaves-cli, addressing seven vulnerabilities, including buffer overflows and arbitrary code execution, alon…
Amazon Q’s MCP Flaw Is an Industry Warning: AI Tools Still Lack Workspace Trust Standards
CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a shared design failure, not just a sing…
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer's cloud credentials. The path was short: a developer o…
New “whoAMI” Attack Exploits AWS AMI Name Confusion for Remote Code Execution
Cybersecurity researchers have disclosed a new type of name confusion attack called whoAMI that allows anyone who publishes an Amazon Machine Image (AMI) with …
AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks
Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that could have resulted in an account…
New 'ALBeast' Vulnerability Exposes Weakness in AWS Application Load Balancer
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
New 'ALBeast' Misconfiguration Exposes Weakness in AWS Application Load Balancer
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
AWS Plugs Holes in ECR APIs
AWS has patched a vulnerability in its Elastic Container Registry (ECR) that was uncovered by Lightspin researcher Gafnit Amiga during an examination of AWS's …
Serious Attacks Could Have Been Staged Through This Amazon ECR Public Gallery Vulnerability
A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could have been potentially exploited to stage a mul…
Researchers Detail AppSync Cross-Tenant Vulnerability in Amazon Web Services
Amazon Web Services (AWS) has resolved a cross-tenant vulnerability in its platform that could be weaponized by an attacker to gain unauthorized access to reso…
Authentication Bypass Bug Found In AWS IAM Authenticator for Kubernetes
A severe security bug existed in the AWS IAM Authenticator for Kubernetes. Exploiting this vulnerability…Authentication Bypass Bug Found In AWS IAM Authenticat…
High-Severity Vulnerability Found In Amazon Photos Android App
Researchers discovered a severe security vulnerability in the Android Photos app that exposed Amazon access…High-Severity Vulnerability Found In Amazon Photos …
SUSE: 2022:96-1 caasp/v4/velero-plugin-for-aws Security Upda
The container caasp/v4/velero-plugin-for-aws was updated. The following patches have been included in this update:
AWS commits to update its own Linux every other ye
Amazon Web Services has announced that it will release an updated version of its own Linux every two years, starting with Amazon Linux 2022, which it is previe…
SUSE: 2021:220-1 caasp/v4.5/velero-plugin-for-aws Security Upda
The container caasp/v4.5/velero-plugin-for-aws was updated. The following patches have been included in this update:
Amazon Alexa Bugs Could've Let Hackers Install Malicious Skills Remotely
Attention! If you use Amazon's voice assistant Alexa in you smart speakers, just opening an innocent-looking web-link could let attackers install hacking skill…
Vulnerabilities In Amazon Alexa Could Leak Users' Sensitive Data To Hackers
Researchers have found numerous security vulnerabilities affecting the home assistant Amazon Alexa. Exploiting the vulnerabilities could leak sensitive details…
Vulnerabilities In Amazon Alexa Could Leak Users' Sensitive Data To Hackers - Bugs Fixed
Researchers have found numerous security vulnerabilities affecting the home assistant Amazon Alexa. Exploiting the vulnerabilities could leak sensitive details…
Amazon Alexa Bugs Allowed Hackers to Install Malicious Skills Remotely
Attention! If you use Amazon's voice assistant Alexa in you smart speakers, just opening an innocent-looking web-link could let attackers install hacking skill…
Amazon's Ring Video Doorbell Lets Attackers Steal Your Wi-Fi Password
Security researchers at Bitdefender have discovered a high-severity security vulnerability in Amazon's Ring Video Doorbell Pro devices that could allow nearby …
Vulnerability Found In Amazon's Ring Video Doorbell
Continuing on the trail of smart security systems exhibiting security issues, now joins Amazon's smart doorbells. Researchers found a seriousVulnerability Foun…
Amazon Kindle And Echo Devices Affected By KRACK WiFi Vulnerability
Researchers have recently discovered a security vulnerability targeting Amazon Kindle and Echo devices. The KRACK WiFi vulnerability discovered back inAmazon K…