Datadog researchers detail tools that validate AWS credentials for Bedrock access by enumerating models and attempting inference. They observed similar activity at 12 organizations and recommend investigating unexpected Bedrock API calls.
Datadog analyzed more than 65,000 Kubernetes clusters and found over 3,500 bindings granting dangerous permissions to built-in principals, highlighting excessive RBAC access and configurations that may need review.
Datadog Security Labs describes an OpenCode RCE flaw (GHSA-632h-h47v-g4x4) that let a malicious webpage trigger installation of an attacker-hosted npm tarball. Versions 1.14.30–1.18.21 were affected; OpenCode 1.18.22 fixes it.