Azure

Toolkit di Sicurezza Offensiva per Azure Una raccolta di script Bash e PowerShell per valutazioni di sicurezza su Azure, che coprono escalation dei privilegi IAM, sicurezza dei container, esposizione di Key Vault, configurazione di Entra ID e altro. Progettati per essere eseguiti in Azure Cloud...

New Developments in LLM Hijacking Activity

Discover the latest in LLM hijacking activity, including a dive into the JINX-2401 campaign targeting AWS environments with IAM privilege escalation tactics...

Privilege Escalation

github.com/kubernetes-sigs/aws-iam-authenticator is vulnerable to privilege escalation. The vulnerability exists due to a lack of verification of authorization allowing an attacker to modify the username in the allow-listed IAM identity and escalating its privileges...

Security feature bypass

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges...