The TL;DR is that this time, we ended up discovering ~150 Amazon S3 buckets that had previously been used across commercial and open source software products, governments, and infrastructure deployment/update pipelines - and then abandoned.
Naturally, we registered them, just to see what would happen - “how many people are really trying to request software updates from S3 buckets that appear to have been abandoned months or even years ago?”, we naively thought to ourselves.
A new ransomware campaign encrypts Amazon S3 buckets using AWS's Server-Side Encryption with Customer Provided Keys (SSE-C) known only to the threat actor, demanding ransoms to receive the decryption key.
The sensitive information of VW, Audi, Seat, and Skoda EV owners was stored on a poorly secured Amazon cloud account for months
Amazon has launched AWS Security Incident Response, a service to help triage and respond to cybersecurity threats.
APT29 aka Midnight Blizzard recently attempted to phish thousands of people. Building on work by CERT-UA, Amazon recently identified internet domains abused by APT29, a group widely attributed to Russia’s Foreign Intelligence Service (SVR). In this instance, their targets were associated with government agencies, enterprises, and militaries, and the phishing campaign was apparently aimed at […]
Two individuals behind the Anonymous Sudan cybercriminal group were indicted by the U.S. Department of Justice, which acknowledged AWS for its contributions.
Discover how SMS scammers are exploiting cloud storage to host scam websites with the intention of stealing sensitive information
Amazon sues REKK, which allegedly helped shoppers get other expensive items for free by hacking and bribing fulfillment center employees to approve fake returns.
Some hallucinations could ‘potentially induce cardiac incidents in Legal,’ according to internal documents
International cybercrime, as portrayed by the movies and mass media, is a high-stakes game of shadowy government agencies and state-sponsored hacking groups. Hollywood casting will wheel out a charact...
The malware-infected AllWinner and RockChip-powered Android TV models are still available to purchase on Amazon.
The group is blackmailing Ring on its site: "There's always an option to let us leak your data," they posted.
Robot vacuum companies say your images are safe, but a sprawling global supply chain for data from our devices creates risk.
For 2nd time in 4 years, Amazon loses control of its IP space in BGP hijacking.
