Curated security research, vulnerabilities, advisories and tools for practitioners.

#aws

Security coverage tagged aws.

1.

A Guide to AWS S3 Buckets Security

blog | 2026-09-11 00:00 | bishopfox.com | original ↗ | #cloud | #cloud-security | #aws

2.

Cloud Penetration: Not Your Typical Internal Testing

blog | 2026-09-11 00:00 | sethsec.blogspot.com | original ↗ | #cloud | #cloud-security | #aws

3.

Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

blog | 2026-08-21 16:20 | jfrog.com | original ↗ | #ai-security | #cloud | #aws

4.

From OpenTofu to Argo CD: GitLab as your AWS control plane

blog | 2026-08-18 00:00 | about.gitlab.com | original ↗ | #cloud | #aws | #gitlab

5.

A few notes on AWS Nitro Enclaves: KMS integration

blog | 2026-08-05 11:00 | blog.trailofbits.com | original ↗ | #cloud | #cloud-security | #aws

6.

Introducing the JFrog Power for Kiro

blog | 2026-06-11 22:19 | jfrog.com | original ↗ | #aws | #mcp | #jfrog

7.

Introducing Wiz Cloud Cost: Powering Cost Management and Optimization with Context

blog | 2026-06-08 12:00 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

8.

Building a Governed AI Model Supply Chain: Integrating AWS SageMaker and the JFrog Platform

blog | 2026-04-22 13:16 | jfrog.com | original ↗ | #ai-security | #cloud | #supply-chain

9.

3 Principles for Modern VDPs: How AWS Keeps Vulnerability Disclosure Working at Massive Scale

blog | 2026-04-10 01:08 | hackerone.com | original ↗ | #bug-bounty | #cloud | #aws

10.

Twenty Years of Cloud Security Research

research | 2026-03-13 13:00 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

11.

XBOW Is Now Available on AWS Marketplace

blog | 2026-02-05 13:00 | xbow.com | original ↗ | #cloud | #cloud-security | #aws

12.

CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

blog | 2026-01-15 15:00 | wiz.io | original ↗ | #cloud | #supply-chain | #aws

13.

JFrog Achieves AWS Security Competency

blog | 2026-01-14 11:54 | jfrog.com | original ↗ | #cloud | #supply-chain | #cloud-security

14.

Top AWS re:Invent Announcements for Security Teams in 2025

blog | 2025-12-08 21:54 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

15.

Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud

blog | 2025-12-03 13:30 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

16.

From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover

blog | 2025-09-04 16:39 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

17.

A new type of long-lived key on AWS: Bedrock API keys

blog | 2025-08-21 12:18 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

18.

JFrog Deployed on AWS: The Foundation for Cloud-Native Excellence

blog | 2025-07-25 17:01 | jfrog.com | original ↗ | #cloud | #aws | #jfrog

19.

When too much access is not enough: a story about Confluence and tokens

research | 2025-07-02 22:00 | blog.quarkslab.com | original ↗ | #cloud | #aws | #red-team

20.

The Ultimate Cloud Security Championship | 12 Months × 12 Challenges

blog | 2025-06-26 13:13 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

21.

Deployed on AWS: Wiz and AWS Marketplace

blog | 2025-05-06 19:06 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

22.

Secure AI by Design: HackerOne's Approach to Data Confidentiality with Hai

blog | 2025-03-27 13:23 | hackerone.com | original ↗ | #ai-security | #cloud | #aws

23.

How to use the new CloudTrail network activity events for AWS VPC Endpoints

blog | 2025-03-20 12:00 | wiz.io | original ↗ | #cloud | #aws | #network-security

24.

Benchmarking OpenSearch and Elasticsearch

blog | 2025-03-06 05:00 | blog.trailofbits.com | original ↗ | #cloud | #aws | #benchmark

25.

The Basics of AWS Infrastructure Security

blog | 2025-01-30 13:00 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

26.

Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)

vulnerability | 2025-01-11 17:23 | CVE-2024-50603 | wiz.io | original ↗ | #cloud | #rce | #aws

27.

Tracking cloud-fluent threat actors - Part two: Behavioral cloud IOCs

blog | 2025-01-15 09:56 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

28.

Avoiding mistakes with AWS OIDC integration conditions

blog | 2025-01-01 14:00 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

29.

The many ways to obtain credentials in AWS

blog | 2024-12-20 13:00 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

30.

New Developments in LLM Hijacking Activity

blog | 2024-12-15 14:07 | wiz.io | original ↗ | #ai-security | #cloud | #aws