PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to use the new CloudTrail network activity events for AWS VPC Endpoints

wiz.io | blog | #cloud | #aws | #network-security | #data-exfiltration | #logging | #cloudtrail | #vpc-endpoints
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How AWS's new CloudTrail network activity events for VPC Endpoints help troubleshoot endpoint policies safely and strengthen defenses against data exfiltration, with sample use cases for defenders.
Published
Collected

Related coverage

blog · wiz.io
Exploring the new AWS Sign Up experience
AWS's new sign-up flow creates a three-account Organization sandbox governed by SCPs and RCPs but lacks full CloudTrail; Wiz explains why a strong security posture still requires leaving the sandbox.
blog · hackerone.com
The AWS Shared Responsibility Model: 3 Areas of Improvement to Make Today Part 3: Logging, Monitoring, and Alerting in AWS
Part 3 of the AWS shared responsibility series covers logging, monitoring, and alerting, explaining how CloudTrail, VPC Flow Logs, and CloudWatch combine to deliver high-value alerts to analysts.
research · wiz.io
The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub
Wiz's Blue Agent walks through investigating a multi-platform data exfiltration campaign spanning AWS, S3 and GitHub, showing how the agent gathers evidence and reconstructs the full attack chain in minutes instead of hours.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · wiz.io
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context
Transform raw scanner output into actionable risk. Discover how Wiz ASPM enriches third-party findings, deduplicates alerts, and maps true attack paths.
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
Back