Amazon Web Services

Reported Context (285)

post assumes an EKS cluster with namespace isolation configured, an enterprise IdP that issues JWTs, and AWS Private Certificate Authority (AWS Private CA)—a managed service for issuing private certificates—set up in Securing Unauthenticated Protocols in Multi-Tenant Kubernetes with mTLS Gateways
the current release is said to contain nearly 170 GB of source code and recent database backups from AWS S3 and EC2, with additional material intended to be released over time. Kensium Breach Claim Alleges 18 TB Exfiltration and 170 GB Data Release
The Google-owned subsidiary also said it identified at least two resale operations leveraging stolen AWS Bedrock keys obtained from two different organizations – llm-routing[.]com (momo) and xingjiabiapi[.]org – both of Chainalysis Says Attack Exposed All Users’ Credentials, Takes Services Offline
NotC2: How We Built an AI-Powered C2 Channel With AWS Services Varonis Demonstrates NotC2 AI-Powered C2 Framework Built on AWS
AWS Identity and Access Management (IAM) is introducing account access manager, a flexible new way to manage workforce access to your Amazon Web Services (AWS) accounts. AWS Launches Account Access Manager for Centralized IAM Role Assignments

CVE (129)

Malware (116)

People (220)

Threat Actors (158)

MITRE ATT&CK (205)

Vendors (335)

Products (903)

Tools (240)

Industries (101)

Countries (77)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.