Cloud Credentials: New Attack Surface for Old Problem

SAN FRANCISCO – Credential theft and abuse have long been a nagging problem for local network administrators. The threat surface ranges from pretexting scams to insiders who abuse network privileges in order to grant themselves higher permissions than otherwise assigned. Here at RSA Conference,...

X (Formerly Twitter): Sub Domain Takeover at mk.prd.vine.co

Hey It looks like the EC2 Instance at mk.prd.vine.co has been stopped and now it has been assigned to someone else Proof of Concept 1. http://mk.prd.vine.co/ few days back didn't have port 443 open but now it does have an open port 443 Response 400 Bad Request 400 Bad Request awselb/2.0 So it loo...

PT-2019-6816

Name of the Vulnerable Software and Affected Versions Cloud-init versions prior to 0.7.0 Description A privilege elevation issue exists when requests to an untrusted system are submitted for EC2 instance data. Recommendations For versions prior to 0.7.0, update to version 0.7.0 or later to resolv...