AWS - Security Ticks

AWS Announces Authentication and Malware Protection Enhancements

AWS Announces Authentication and Malware Protection Enhancements 2024-06-14 at 10:01 By Eduard Kovacs AWS announced passkey MFA for IAM and root users, IAM Access Analyzer updates, and Amazon GuardDuty Malware Protection for S3. The post AWS Announces Authentication and Malware Protection Enhancements appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]

React to this headline:

AWS Announces Authentication and Malware Protection Enhancements Read More »

Critical Fluent Bit flaw affects major cloud platforms, tech companies’ offerings (CVE-2024-4323)

AWS, Cisco, cloud computing, Don't miss, Google Cloud, Hot stuff, Intel, logging, News, open source, Sumo Logic, Tenable, Trend Micro, VMWare, vulnerability / SecurityTicks

Critical Fluent Bit flaw affects major cloud platforms, tech companies’ offerings (CVE-2024-4323) 2024-05-21 at 14:31 By Zeljka Zorz Tenable researchers have discovered a critical vulnerability (CVE-2024-4323) in Fluent Bit, a logging utility used by major cloud providers and tech companies, which may be leveraged for denial of service, information disclosure, or remote code execution. About

React to this headline:

Critical Fluent Bit flaw affects major cloud platforms, tech companies’ offerings (CVE-2024-4323) Read More »

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity

AWS, cloud security, Don't miss, GitHub, Hot stuff, News, Permiso, software / SecurityTicks

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity 2024-04-22 at 07:32 By Mirko Zorz Cloud Console Cartographer is an open-source tool that maps noisy log activity into highly consolidated, succinct events to help security practitioners cut through the noise and understand console behavior in their environment. “Infrastructure as code has replaced a

React to this headline:

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity Read More »

Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks

AWS, cloud security, DDoS, Featured, Network Security / SecurityTicks

Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks 2024-04-11 at 17:46 By Kevin Townsend SecurityWeek speaks to Tom Scholl, VP and distinguished engineer at AWS, on how the organization tackles IP Spoofing and DDoS attacks. The post Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks appeared first on SecurityWeek. This article is an

React to this headline:

Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks Read More »

Amazon takes minority share in ChatGPT rival Anthropic AI

AI chatbot, Amazon, Anthropic AI, AWS, Claude, investment / SecurityTicks

Amazon takes minority share in ChatGPT rival Anthropic AI 2024-03-28 at 10:02 By Cointelegraph by Savannah Fortis Amazon has fulfilled its $4 billion investment commitment to AI startup Anthropic, announcing a minority ownership stake in the company and Amazon Web Services (AWS) as its cloud service provider. This article is an excerpt from Cointelegraph.com News

React to this headline:

Amazon takes minority share in ChatGPT rival Anthropic AI Read More »

CloudGrappler: Open-source tool detects activity in cloud environments

AWS, Azure, Cado Security, cloud security, cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, Permiso, software / SecurityTicks

CloudGrappler: Open-source tool detects activity in cloud environments 2024-03-11 at 09:07 By Mirko Zorz CloudGrappler is an open-source tool designed to assist security teams in identifying threat actors within their AWS and Azure environments. The tool, built on the foundation of Cado Security’s cloudgrep project, offers enhanced detection capabilities based on the tactics, techniques, and

React to this headline:

CloudGrappler: Open-source tool detects activity in cloud environments Read More »

Prowler: Open-source security tool for AWS, Google Cloud Platform, Azure

AWS, cybersecurity, database security, Don't miss, GitHub, Hot stuff, News, open source, software / SecurityTicks

Prowler: Open-source security tool for AWS, Google Cloud Platform, Azure 2024-02-07 at 07:31 By Mirko Zorz Prowler is an open-source security tool designed to assess, audit, and enhance the security of AWS, GCP, and Azure. It’s also equipped for incident response, continuous monitoring, hardening, and forensics preparation. Details The tool includes hundreds of controls that

React to this headline:

Prowler: Open-source security tool for AWS, Google Cloud Platform, Azure Read More »

Researchers discover exposed API secrets, impacting major tech tokens

API security, AWS, cybersecurity, Data leak, Escape, GitHub, News, Slack, Stripe / SecurityTicks

Researchers discover exposed API secrets, impacting major tech tokens 2024-02-05 at 07:33 By Help Net Security Escape’s security research team scanned 189.5 million URLs and found more than 18,000 exposed API secrets. 41% of exposed secrets were highly critical, i.e. could lead to financial risks for the organizations. Exposed API secrets The exposed secrets include

React to this headline:

Researchers discover exposed API secrets, impacting major tech tokens Read More »

CloudFoxable: Open-source AWS penetration testing playground

AWS, Bishop Fox, cybersecurity, News, penetration testing, research, skill development, software / SecurityTicks

CloudFoxable: Open-source AWS penetration testing playground 2024-01-22 at 07:02 By Mirko Zorz CloudFoxable is a capture-the-flag (CTF) style learning platform you can deploy to your playground AWS account. It primarily targets current penetration testers seeking to learn exploitation of cloud-native attack paths, and cloud security experts aiming to practice offensive security techniques safely. “What makes

React to this headline:

CloudFoxable: Open-source AWS penetration testing playground Read More »

Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services

AWS, cybercrime, Fbot, Fraud & Identity Theft, PayPal, SentinelLabs / SecurityTicks

Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services 2024-01-11 at 23:01 By Ryan Naraine The tool, called FBot, is capable of credential harvesting for spamming attacks, and AWS, PayPal and SaaS account hijacking. The post Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services Read More »

5 free generative AI courses you can take right now

AWS, Don't miss, generative AI, Google, Ingram Micro, News, skill development / SecurityTicks

5 free generative AI courses you can take right now 2023-12-27 at 07:01 By Help Net Security Generative AI (GenAI) is a form of artificial intelligence technology focused on generating new content. This can include text, images, audio, and other media types. It’s a rapidly evolving field with significant implications in various industries, technology, and

React to this headline:

5 free generative AI courses you can take right now Read More »

1Kosmos partners with AWS to offer MFA for customer use cases

1Kosmos, Amazon, AWS, Industry news / SecurityTicks

1Kosmos partners with AWS to offer MFA for customer use cases 07/12/2023 at 14:31 By Industry News 1Kosmos announced it has completed the integration of its 1Kosmos BlockID platform with Amazon Cognito. As an AWS Advanced Technology Partner, 1Kosmos enables Amazon customers to seamlessly add passwordless multi-factor authentication (MFA) to their customer-facing web and mobile

React to this headline:

1Kosmos partners with AWS to offer MFA for customer use cases Read More »

Business metrics for Cisco Cloud Observability capability enables customers to protect revenue

AWS, Cisco, Industry news / SecurityTicks

Business metrics for Cisco Cloud Observability capability enables customers to protect revenue 29/11/2023 at 15:02 By Industry News Cisco announced new business metrics in Cisco Cloud Observability. Powered by the Cisco Observability Platform to enhance business context for modern applications running on AWS. This latest release also supports integration with AWS services and application performance

React to this headline:

Business metrics for Cisco Cloud Observability capability enables customers to protect revenue Read More »

Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets

access, AWS, Cloud, cloud security, IAM, Identity & Access / SecurityTicks

Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets 28/11/2023 at 17:17 By Eduard Kovacs AWS announces Amazon One Enterprise, a palm-based identity service that enables users to easily access physical locations and digital assets. The post Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets appeared first on SecurityWeek. This

React to this headline:

Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets Read More »

Sumo Logic accelerates troubleshooting and security across AWS environments

AWS, Industry news, Sumo Logic / SecurityTicks

Sumo Logic accelerates troubleshooting and security across AWS environments 28/11/2023 at 17:01 By Industry News Sumo Logic announced a number of new innovations and updates that help users accelerate troubleshooting and security across AWS environments, within a span of minutes and a few clicks. Digital transformation and cloud initiatives are creating complexity for organizations, with

React to this headline:

Sumo Logic accelerates troubleshooting and security across AWS environments Read More »

IBM partners with AWS to optimize data management for AI workloads

AWS, IBM, Industry news / SecurityTicks

IBM partners with AWS to optimize data management for AI workloads 28/11/2023 at 15:01 By Industry News IBM announced that it has been working with AWS on the general availability of Amazon Relational Database Service (Amazon RDS) for Db2, a fully managed cloud offering designed to make it easier for database customers to manage data

React to this headline:

IBM partners with AWS to optimize data management for AI workloads Read More »

Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets

AWS, Industry news / SecurityTicks

Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets 28/11/2023 at 10:31 By Industry News AWS announced Amazon One Enterprise, a palm-based identity service for comprehensive and easy-to-use authentication that improves organizational security and helps prevent costly security breaches. The new service enables organizations to provide a fast, convenient, and contactless

React to this headline:

Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets Read More »

Trellix accelerates threat detection and response with GenAI capabilities

AWS, Industry news, Trellix / SecurityTicks

Trellix accelerates threat detection and response with GenAI capabilities 27/11/2023 at 15:01 By Industry News Trellix announced its generative artificial intelligence (GenAI) capabilities, built on Amazon Bedrock and supported by Trellix Advanced Research Center. Amazon Bedrock is a fully managed service from AWS making foundation models (FMs) from leading AI companies accessible via an API

React to this headline:

Trellix accelerates threat detection and response with GenAI capabilities Read More »

AWS Kill Switch: Open-source incident response tool

AWS, GitHub, Incident Response, News, open source, software / SecurityTicks

AWS Kill Switch: Open-source incident response tool 27/11/2023 at 09:01 By Mirko Zorz AWS Kill Switch is an open-source incident response tool for quickly locking down AWS accounts and IAM roles during a security incident. The solution includes a Lambda function and proof of concept client. You can either adopt this client or build your

React to this headline:

AWS Kill Switch: Open-source incident response tool Read More »

8 free AI and GenAI courses from AWS

Artificial Intelligence, AWS, generative AI, Industry news, News, skill development / SecurityTicks

8 free AI and GenAI courses from AWS 21/11/2023 at 14:02 By Industry News Amazon’s AI Ready initiative aims to provide free AI skills training and education to 2 million people globally by 2025. “Artificial intelligence is the most transformative technology of our generation. If we are going to unlock the full potential of AI

React to this headline:

8 free AI and GenAI courses from AWS Read More »