metahub

MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...

nuvola

nuvola nuvola con la n minúscula es una herramienta para volcar y realizar análisis de seguridad automáticos y manuales sobre configuraciones y servicios de entornos AWS, utilizando reglas predefinidas, extensibles y personalizadas creadas con una sintaxis YAML simple. La idea general detrás de...

Awesome-CloudSec-Labs

Awesome Cloud Security Labs A list of free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs. Sorted by Technology and Category Name| Technology| Category| Author| Notes ---|---|---|---|--- The Ultimate Cloud Security...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

aws-security-assessment-solution

Soluciones de Evaluación de Seguridad de Autoservicio v2.0 La ciberseguridad sigue siendo un tema muy importante y un punto de preocupación para muchos CIOs, CISOs y sus clientes. Para abordar estas importantes preocupaciones, AWS ha desarrollado un conjunto principal de servicios que los cliente...

cloudmapper

CloudMapper Nota : La funcionalidad de Visualización de Red comando prepare ya no se mantiene. CloudMapper te ayuda a analizar tus entornos de Amazon Web Services AWS. El propósito original era generar diagramas de red y mostrarlos en tu navegador funcionalidad ya no mantenida. Ahora contiene muc...

metahub

MetaHub 是一个用于漏洞管理的自动化上下文安全发现丰富和影响评估工具。您可以将它与 AWS Security Hub 或任何兼容 ASFF 的安全扫描器一起使用。不再依赖无用的严重性等级，转而使用基于您自身环境的上下文影响评分定义。 目录 描述 快速运行 上下文 影响 高层架构 使用场景 配置 使用 Python 运行 使用 Docker 运行 使用 Lambda 运行 使用 Security Hub 自定义操作运行 AWS 认证 配置 Security Hub 配置上下文 输入 输出 过滤器 Security Hub 操作 贡献 描述 MetaHub...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform 模块注册表 一个 Terraform 模块，用于以相对安全的基础配置来设置您的 AWS 账户。 大部分配置基于 CIS Amazon Web Services Foundations v1.4.0 和 AWS Foundational Security Best Practices v1.0.0。 查看 基准合规性 以了解覆盖了哪些基准中的项。 功能 身份与访问管理 设置 IAM 密码策略。 创建一个用于联系 AWS 支持部门以处理事件响应的 IAM 角色。 启用 AWS Config 规则以审计根账户状态。...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

CVE-2026-87913

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

CVE-2026-87913

The AWS Security Agent MCP server prior to version 0.2.0 is vulnerable to a missing S3 bucket ownership verification , allowing remote attackers to obtain the private source archive of a scanned workspace — including credentials and infrastructure state — by registering a storage bucket whose nam...

EUVD-2026-75571

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

CVE-2026-87912

CVE-2026-87912 affects the AWS Security Agent plugin in Amazon aws-agents-for-devsecops prior to version 1.1.0. A missing S3 bucket ownership verification allows a remote attacker to obtain the private source archive of a scanned workspace—potentially exposing credentials and infrastructure state...

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

aws-perimeter

aws-perimeter Un Escáner de seguridad de AWS basado en terminal con más de 100 verificaciones de seguridad en VPC, IAM, S3, CloudTrail, contenedores ECS/EKS y detección de ataques de IA. Detecta permisos peligrosos de IAM, secretos expuestos, buckets S3 mal configurados, vulnerabilidades de...

terraform-aws-security-group

terraform-aws-security-group Terraform module to manage AWS Security Groups. Currently, the ingress and egress rules support IPv4, IPv6, and Security Group ID inputs. Requirements...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1693)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1693 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Give up GC if MSGPEEK intervened. CVE-2026-23394 In the Linux kernel, the following vulnerability has been resolved:...

AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN

Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid D...

CVE-2024-41178

Exposure of temporary credentials in logs in Apache Arrow Rust Object Store objectstore crate, version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity...