Amazon Web Services (AWS) has resolved a cross-tenant vulnerability in its platform that could be weaponized by an attacker to gain unauthorized access to resources.
The issue relates to a confused deputy problem, a type of privilege escalation where a program that doesn’t have permission to perform an action can coerce a more-privileged entity to perform the action.
The shortcoming was reported
Related Post
- November 26, 2024
CISA Urges Agencies to Patch Critical “Array Networks”
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched critical security flaw impacting Array Networks AG
- November 25, 2024
FlipaClip animation app data breach exposes details of
Graham CLULEY November 25, 2024 Promo Protect all your devices, without slowing them down. Free 30-day trial Flipaclip, an animation
- November 25, 2024
Google’s New Restore Credentials Tool Simplifies App Login
Google has introduced a new feature called Restore Credentials to help users restore their account access to third-party apps securely
- November 25, 2024
PyPI Python Library “aiocpa” Found Exfiltrating Crypto Keys
The administrators of the Python Package Index (PyPI) repository have quarantined the package “aiocpa” following a new update that included