EUVD-2026-64067

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-32637 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp-fips, velero-plugin-for-gcp, velero-plugin-for-aws-fips, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

GHSA-J2G6-362Q-6QC6 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-aws...

CVE-2026-32637 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-aws...

Medical records, SSNs, and bank details exposed in CareCloud data breach

Healthcare technology giant CareCloud has confirmed that a data breach earlier this year impacted more than 3.75 million people, making it one of the largest healthcare data incidents disclosed this year. The New Jersey-based company, which provides electronic health record EHR and practice...

PT-2026-79440

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-77810: Improper Neutralization of Directives in Dynamically Evaluated Code

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

Explainable Adaptive Zero Trust Framework for AWS with Adversarial Robustness Evaluation

Cloud environments built on Amazon Web Services face a structural security vulnerability: once a credential passes authentication, the resulting session is often treated as trusted for its entire duration. This assumption fails when credentials are stolen. We introduce the Explainable Adaptive Ze...

USN-8630-4 linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

CVE-2026-75910

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

EUVD-2026-63585

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

repokid v0.19.8

Repokid Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install root@kitploit: mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid pi...

GO-2026-6095 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-apprunner-fips, crossplane-provider-aws-emr, crossplane-provider-aws-lakeformation, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-grafana, crossplane-provider-aws-kafka,...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-apprunner-fips, crossplane-provider-aws-emr, crossplane-provider-aws-lakeformation, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-grafana, crossplane-provider-aws-kafka,...

GO-2026-6095 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, crossplane-provider-aws-sqs, gitness, crossplane-provider-azure-sql, crossplane-provider-aws-elasticache, crossplane-provider-aws-firehose, crossplane-provider-aws-memorydb, crossplane-provider-azure-authorization,...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, hubble-ui, rke2-cloud-provider, cluster-api-azure-controller, cloud-provider-gcp-cloud-controller-manager, cluster-api-ipam-provider-in-cluster, openbao, cloud-provider-azure, openfga, kapp-controller, opentelemetry-operator, rancher,...

EUVD-2026-62941

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...

PT-2026-79118

Name of the Vulnerable Software and Affected Versions Amazon Athena Federated Query ClickHouse connector versions prior to v2026.17.1 Description Incorrect privilege assignment in the deployment template allows an authenticated remote user to read arbitrary AWS Secrets Manager secrets within the...