AWS outlines WAF rules and PHP server-side mitigations to reduce exposure to PHP2Shell CVE-2026-109618 and CVE-2026-109619 while patching, and notes that disabling session upload progress also mitigates CVE-2026-115560.
AWS says MadPot telemetry recorded PHP2Shell exploitation attempts on Oct. 17, 2026—four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. It cannot confirm the attempts would succeed against real systems.
AWS outlines how to integrate external PKI with IAM Roles Anywhere, including certificate-based workload identities, scoped trust policies, temporary credentials, private-key protection, certificate-expiry monitoring, and rotation.
AWS’s updated IAM Identity Center migration guide describes preserving users, groups, memberships and assignments when moving away from Active Directory, and provides an Okta migration runbook with validation and rollback steps.
AWS reports that its Security Agent exploited 33 of 37 recent CVEs end to end in an audited benchmark. Two other exploit attempts took targets offline before the agent could retrieve the seeded flags.
AWS explains how to run scoped penetration tests after deployment and block production promotion based on findings, using OIDC authentication and CI/CD pipeline settings. It also warns about baseline advancement and fail-open defaults.
Three security professionals describe paths into application-risk assessment, threat detection, application security and satellite security, highlighting how transferable skills, stretch projects, mentorship and curiosity can shape cybersecurity careers.
AWS says GuardDuty Extended Threat Detection began adding five indicator types to attack-sequence findings on May 20, 2026, correlating runtime signals with vulnerability, package, reachability, misconfiguration, and sensitive-data context.
