Code injection

When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by an adversary that places a MITM Man in the Middle between a zero client and AWS session provisioner in the network. This issue is only...

CVE-2022-1805

CVE-2022-1805 describes a MITM risk in Teradici PCoIP Zero Clients when connecting to Amazon Workspaces: the SHA256 presented by the AWS Connection Configurator is not fully verified by the Zero Client, allowing potential interception between the Zero Client and the AWS session provisioner. The i...

TerraformGoat - "Vulnerable By Design" Multi Cloud Deployment Tool

TerraformGoat is selefra research lab's "Vulnerable by Design" multi cloud deployment tool. Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, Microsoft Azure. Scenarios ID | Cloud Service Company | Types Of Cloud...

F5 Networks BIG-IP : BIG-IP AWS vulnerability (K01153535)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.3.1 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K01153535 advisory. - On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA...

See the best of Wiz at AWS re:Inforce

Visit our booth and attend one of our many sessions at re:Inforce this week...

Trend Micro Joins AWS Marketplace Vendor Insights

Streamlining and enhancing security in the cloud with AWS and Trend Micro...

Rapid7 at AWS re:Inforce: 2 Big Announcements

This year's AWS re:Inforce conference in Boston has been jam-packed with thrilling speakers, deep insights on all things cloud, and some much-needed in-person collaboration from all walks of the technology community. It also coincides with some exciting announcements from AWS — and we're honored ...

Better Together: AWS and Trend Micro

This post relays the latest threat detection tool innovation of AWS - Amazon GuardDuty Malware Protection. This tool works closely with Trend Micro cloud solutions, providing another valuable layer of defense in our fight against a shared adversary...

What We’re Looking Forward to at AWS re:Inforce

AWS re:Inforce 2022 starts tomorrow — Tuesday, July 26th — and we couldn't be more excited to gather with the tech, cloud, and security communities in our home city of Boston. Here's a sneak peek of the highlights to come at re:Inforce and what we're looking forward to the most this Tuesday and...

Moderate Photon OS Security Update - PHSA-2022-0425

Updates of 'linux-rt', 'linux-esx', 'linux-secure', 'linux', 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-0499

Updates of 'linux-secure', 'linux-aws', 'linux', 'linux-esx' packages of Photon OS have been released...

The 8220 Cryptomining Gang massively expands Cloud Botnets

Threat Level Actor Report For a detailed advisory, download the pdf file here Summary The 8220 gang has significantly expanded their cloud bot armies around the world, targeting AWS, Azure, GCP, Alitun, and QCloud cloud service hosts. The group is being detected using a new version of the IRC...

Important Photon OS Security Update - PHSA-2022-0214

Updates of 'linux-esx', 'linux-aws', 'linux', 'linux-rt', 'linux-secure', 'go', 'libtiff', 'ImageMagick' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0214

Updates of 'linux-secure', 'ImageMagick', 'go', 'linux-rt', 'libtiff', 'linux', 'linux-esx', 'linux-aws', 'lua' packages of Photon OS have been released...

Use Qualys ­­Flow to Automate Detection & Remediation with No-code Workflows

The threat landscape is rapidly and constantly evolving. New software vulnerabilities and service misconfigurations are discovered daily, and exploits targeting them are often released within hours. For effective security, pursuing the automation of both detection and remediation processes is...

CVE-2022-30570

The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the...

Design/Logic Flaw

The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the...

CVE-2022-30570 TIBCO Data Virtualization Access Control Vulnerability

The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the...

CVE-2022-30570

CVE-2022-30570 affects TIBCO Data Virtualization (TDV) and TDV for AWS Marketplace in the Column Based Security component. A low-privileged attacker with network access can obtain read access to application information on the affected system. Affected releases: TDV 8.5.2 and earlier; TDV for AWS ...

Wallarm extends AWS API security with the official Terraform module

Wallarm API Security solution is now available in AWS as an official Terraform module, with a full feature set including autoscaling groups, API Gateway connector, mirroring, and agentless out-of-band deployments. To address modern cloud-native threats, API security vendor Wallarm released extend...