AWS Patches Vulnerabilities Potentially Allowing Account Takeovers

August 8, 2024 at 06:30AM AWS recently addressed potentially critical vulnerabilities, including flaws that could have allowed attackers to take over accounts, disclosed by Aqua Security at Black Hat. The security holes could have enabled arbitrary code execution, account control, data exposure, DoS attacks, data exfiltration, and AI model manipulation in AWS services such as … Read more

Open-Source Tool Looks for Signals in Noisy AWS Cloud Logs

April 18, 2024 at 08:35AM Researcher Daniel Bohannon discusses the challenges of dealing with extensive logging in Amazon Web Services, which creates a large volume of events that make it difficult to identify user actions. He plans to launch an open-source tool at Black Hat Asia to help consolidate the cloud log events, with future … Read more

HARmor Cleans, Sanitizes, Encrypts HAR Files

November 14, 2023 at 04:51PM Frontegg has released an open source tool called HARmor to help secure HTTP Archive (HAR) files from unauthorized access. HAR files are commonly used by developers and support teams for debugging, performance analysis, and investigating security vulnerabilities of web applications. HAR files can contain sensitive data, making them potential targets … Read more