Amazon Web Services

Reported Context (219)

Additionally, the audit uncovered 3,805 YouTube tokens, 600 GitHub tokens, 338 AWS credentials, and 220 MongoDB keys. Audit Finds 26,000 Live Credentials in 7.25 Million Gitee Repositories
1,489 keys for Zhipu's BigModel AI platform, and 1,348 OpenAI keys. Smaller numbers were found for GitHub, AWS, Google Cloud and Google's Gemini. 26,400 Working Cloud and AI Credentials Found in Public Gitee Repositories
self-hosted runner payloads targeting self-hosted CI runners; a payload targeting GitHub runners and AWS-requesting GitHub OIDC tokens (in order to assume AWS roles and achieve cloud account access); and the font GhostAction Workflows Were Blocked, but Nearly 1,800 Accounts Remain Compromised
For HTTP and HTTPS, AWS Network Firewall domain rules match the name that the client puts in the request, and the client chooses that name. AWS Network Firewall Adds Route 53 Resolved IP Validation
We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first ever Cloud High (PBHH) security assessment with 172 assessed AWS Says It Is First Canadian CSP to Complete Cloud High Assessment

CVE (111)

Malware (83)

People (187)

Threat Actors (128)

MITRE ATT&CK (157)

Vendors (280)

Products (764)

Tools (181)

Industries (78)

Countries (68)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.