Uber breached again for the second time in a year
Uber has breached yet another time with a high-profile data leak that exposed sensitive employee and company data by compromising an AWS cloud server used by a third party that…
AWS Cross Tenant Confused Deputy Vulnerability
A cross-tenant vulnerability in AWS could be exploited and have allowed attackers to abuse AWS AppSync service to assume IAM and gain access to resources in an organization’s account. The…
F5 AI Driven Bot Protection for AWS Customers
AWS customers now have access to F5’s AI-driven bot protection through an easy to deploy connector. Most of consumers’ favorite sites, logins, and applications are crawling with them at this…
AWS IAM Identity Center API
AWS debuted IAM Identity Center APIs to create users and groups enmass. Administrators can use these new APIs to manage identities programmatic and gain visibility into users in the Identity Center…
AWS Wickr – Encrypted Communication Service
Amazon announced the preview of the collaboration suite AWS Wickr. The new managed service provides enterprises and government agencies with security and administrative controls to meet security and compliance requirements.…
Hard coded AWS Credentials found in mobile apps
Researchers have discovered 1,859 Android and iOS apps containing hard-coded AWS credentials that allowed access to private cloud services. 98% apps containing hard-coded iOS apps, this is a trend that…
Posted inCloud Certifications
AWS Certified Solution Architect Associate Study Guide
Recently, I passed my Amazon Web Services (AWS) Certified Solutions Architect Associate exam. While the information was fresh in my mind, I wanted to put together a post on my…
AWS Database Vulnerabilities lead to End of some versions
Researcher at Lightspin security firm recently explained how she obtained credentials to an internal AWS service using a PostgreSQL extension and exploiting a local file read vulnerability on RDS. AWS confirmed the…