AWS CLI (Product): news timeline & CVEs

Hackers Don’t Need to Break Into the Cloud When They Can Steal the Keys

Wiz says Lumma, RedLine, and Vidar stealers are harvesting cloud, code, and AI credentials.

A Wiz report says infostealers infect employee or developer devices through phishing, deceptive downloads, or poisoned dependencies, then steal browser data, API keys, and active sessions trusted by cloud services. Lumma, RedLine, and Vidar accounted for 85.7 percent of detected incidents. AWS secrets represented 46 percent of compromised secrets, Google Cloud 13 percent, GitHub tokens about 10 percent, and AI platform secrets 5 percent. Stolen session tokens can impersonate an already authenticated user, so Wiz advises revoking sessions and rotating credentials from a clean device.

Cyber Security NewsSep 28, 09:21 UTC · 1d agoMalware in the wild 3 sources

Lumma, RedLine and Vidar Infostealers Fuel Cloud Credential Theft Campaigns

Lumma, RedLine, and Vidar steal cloud and developer credentials, enabling session hijacking that bypasses MFA.

NordStellar telemetry across more than 55 infostealer families found LummaC2, RedLine, and Vidar responsible for 85.7% of detected incidents that expose cloud and developer secrets. The stealers, spread via phishing, malvertising, ClickFix, and trojanized software, harvest browser passwords, session cookies, SSH keys, and cloud CLI tokens that can bypass MFA. Wiz documented JINX-0164 using compromised developer endpoints to steal AWS, Azure, GCP, Cloudflare, and GitHub credentials, and in June found the Miasma payload in at least 32 npm releases under @redhat-cloud-services. Stolen secrets also include OpenAI, Anthropic, Hugging Face, and other AI platform keys.

GBHackersSep 28, 09:12 UTC · 1d agoMalware in the wild 3 sources

AWS’s new sign-up gives accounts spend caps, email invites, and agent-set permissions

AWS's new sign-up flow gives fresh accounts agent-configured permissions, email-based team access, and per-project monthly spend caps starting at $20.

New AWS customers can sign up with Google, GitHub, or Apple identities, start with $100 in Free Tier credits, and build inside a project where AWS and coding agents automatically configure permissions and install tools like the AWS CLI and Agent Toolkit. In a demo, an agent deployed a Lambda function, DynamoDB table, and API Gateway endpoint without any manually written IAM policies. Paid projects get monthly spend limits starting at $20 that pause the project when reached, and the gradual rollout applies to new customers only.

Help Net SecuritySep 17, 04:51 UTC · 12d agoAI tools & infra

AWS CLI

Timeline3 articles

Appears with

Hackers Don’t Need to Break Into the Cloud When They Can Steal the Keys

Lumma, RedLine and Vidar Infostealers Fuel Cloud Credential Theft Campaigns

AWS’s new sign-up gives accounts spend caps, email invites, and agent-set permissions