Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Exploring the new AWS Sign Up experience

wiz.io | blog | #cloud | #cloud-security | #aws | #sandbox | #cloudtrail | #aws-organizations | #scps | #account-access

Summary

AWS's new sign-up flow creates a three-account Organization sandbox governed by SCPs and RCPs but lacks full CloudTrail; Wiz explains why a strong security posture still requires leaving the sandbox.
Published
Collected

original ↗

Related coverage

blog · wiz.io
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz Research analyzes NordStellar logs to map credentials harvested by infostealers like Lumma and RedLine, showing how stolen keys and tokens unlock AWS, Azure, GitHub, and AI platforms.
blog · wiz.io
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
Wiz earned Leader status in Forrester's Q3 2026 Proactive Security Platforms Wave, scoring 5.0/5.0 on 8 of 21 criteria, including cloud visibility, exposure validation, and remediation augmentation.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · netspi.com
Overcome Cloud Security Challenges with Purpose-Built Cloud Penetration Testing
Outlines five cloud security challenges—shadow IT, attacker-defender resource asymmetry, catastrophic misconfigurations—and argues purpose-built cloud penetration testing is the way to address them.
blog · netspi.com
AWS versus Azure Cloud Testing: Understanding the Differences
Compares cloud penetration testing across AWS and Azure, explaining the shared responsibility model and why platform-specific nuances matter for methodology and cloud security maturity.
blog · netspi.com
Gaining AWS Console Access via API Keys
Converts compromised AWS API keys, whether permanent AKIA or temporary ASIA credentials, into browser console access via the federation endpoint, easing recon compared with wrangling CLI syntax.
back