AWS launches Emulator for agents to test code against local AWS
Amazon says the tool is meant to stand in for more than 200 services that are too numerous to mock by hand.
Stories per day · 30 days
14 RSS
Relatediam9qubole8credential-theft6supply-chain6cloud5azure4s34cloud-security3github3php3trainium3amazon2anthropic2antifox2artex2c22cloud-recovery2developer-tools2
119 stories, newest first · one card per story
Stories tagged #aws
AntiFox AI pentest tool tied to AWS secret theft
Arctic Wolf says attackers used AntiFox after web shells and valid AWS credentials, including a successful production GetSecretValue call.
Dreeze exits stealth with $33 million for cloud app recovery
Application Revival is generally available on AWS; Azure is in early access, with general availability expected in early 2027.
Ubuntu patches AWS Linux kernel flaws, including Xen frontend bug
A malicious Xen backend could read guest memory pages or crash the guest; other kernel subsystems are also fixed.
Attackers used Qubole AWS credentials to raid customer clouds
From October 14 to 26 the actor assumed trusted roles, harvested secrets and downloaded S3 data from dozens of victims.
GhostAction campaign hits 500+ GitHub accounts with secret-stealing workflows
Hijacked maintainers added security-audit.yml from October 7 and sent secrets in plaintext to 193.32.204.199.
Datadog reports in-the-wild ARTEX agentic attacks on AWS environments
Operators used stolen IAM keys and public Cognito pools to hunt financial data, secrets, and account details.
Varonis Discovers NotC2 AI-Powered C2 Framework
NotC2 uses AWS Bedrock to interpret natural language commands and routes them via SQS, Lambda, and SNS.
Paper proposes agentic attribution of cloud resource ownership
On 100 AWS resources the architecture reached 92.1% weighted recall and 86.6% weighted precision, versus 54.8% and 77.4%.
Study confirms 103 of 233 AI-discovered cloud threats on live clouds
Three foundation models reached 75.2% precision, but multi-model agreement did not improve confirmation rates.
Daybreak Red now available in AWS GovCloud
OpenAI's Daybreak Red cybersecurity model is now available in AWS GovCloud for government teams.
Ubuntu AWS kernel fix addresses Xen backend memory DoS
A guest that stops processing packets can exhaust kernel memory in the Xen network backend domain.
Security data lake platforms evaluated for 2026
Snowflake leads for ecosystem depth while Amazon offers purest OCSF normalization in security data lake platforms.
Google::Auth for Perl (2 CVEs)
Affects versions 0.11 through 0.12; no fixed versions or exploitation stated.
n0n extortion operator exposed AI-aided attack files on open server
SOCRadar says every examined break-in used weak or stolen credentials, not a software vulnerability.
1
Jassy says AWS can reach $1T revenue after heavy AI infrastructure spending
Amazon still expects about $220 billion cash capex in 2026, mostly for AWS, and more in 2027.
Microsoft reports Azure revenue of $33.2 billion for July–September
The total is 48% above a year earlier and about $850 million over the $32.3 billion analysts expected.
Amazon may profit more than VCs from Anthropic’s planned IPO
Amazon’s convertible notes were valued at $97.9 billion as of June 30, capped at 12% of partially diluted shares.
Gheist uses stolen GitHub tokens to leak private repository secrets
Wiz recovered over 13,500 planted branches from 850-plus accounts; GitHub’s public-repo hold does not cover private repos.
1
2026 confidential computing ranking puts Azure first of ten
Editorial scores, not lab tests, place AWS Nitro Enclaves second and Google Cloud third, with Intel and AMD as silicon lanes.
1
Unrevoked LiteLLM key used to publish credential-stealing PyPI package
Microsoft said the malware ran on every Python startup, and stolen AWS keys were checked against Amazon AI models.
Hugging Face blog points to an AWS Trainium model lookup
Only the title is available, so what the lookup covers is not stated.
Attackers probed PHP2Shell flaws days before the October 21 patches
Amazon honeypots logged attempts against CVE-2026-109618 and CVE-2026-109619 from October 17; AWS later said exploitation was widespread.
Attackers exploited critical PHP flaws days before patches landed
AWS honeypots logged PHP2Shell attempts on October 17, four days before Wednesday's disclosure, and exploitation is now described as broad.