aws news
2 stories
awscritical
Hundreds of leaked AWS keys give full control over corporate accounts
Over 9,300 Amazon Web Services (AWS) access keys, publicly exposed between August 2022 and August 2026, remain active and valid, according to research from Truffle Security. The firm has been tracking these exposures for four years, identifying 817 keys linked to companies, with 526 of these being AWS root keys.
awshigh
From CI/CD to Cloud Data: How Shai Hulud Persistence Leads to Redshift Breach
A sophisticated supply chain attack, dubbed Shai Hulud, has been observed leveraging poisoned software dependencies to infiltrate CI/CD pipelines and subsequently gain access to sensitive cloud data, including information stored in Amazon Redshift. The campaign, attributed to a group known as TeamPCP, has been active since late 2025, targeting popular package repositories like npm and PyPI.