tag: Security
show all- Critical Brotli Decoder Vulnerability Affects Multiple AWS Services
- AWS API MCP Server OAuth Token Validation Bypass – Update Required
- Amazon SageMaker Python SDK Vulnerability Requires Immediate Update
- Kiro Crew WhatsApp Authorization Flaw Needs Your Attention
- AWS Amplify API Category: Critical Authorization Bypass in Query Resolvers
- AWS Continuum for Penetration Testing Expands to 6 New Regions
- AWS Advanced JDBC Wrapper XXE Vulnerability Requires Immediate Patching
- OpenSearch Dashboards XSS Vulnerability Requires Urgent Patching
- Amazon SageMaker Python SDK: Critical HMAC Key Exposure Vulnerability
- Scaling Amazon Q Securely: From Proof-of-Concept to Production
- OpenSearch SQL Plugin: Critical Deserialization Flaw Lets Attackers Execute Code
- Securing AI Agent Tool Calls with Amazon Bedrock Guardrails
- Firecracker Jailer Symlink Vulnerability Requires Immediate Patching
- MariaDB Audit Plugin Bypass: Comments Hide SQL Queries
- Graph Explorer HTTPS Fallback Vulnerability Requires Immediate Update
- Amazon EFS CSI Driver Vulnerability Allows Mount Option Injection
- OpenSearch Dashboards TSVB Plugin RCE Vulnerability – Upgrade Required
- Bedrock AgentCore Starter Toolkit: S3 Verification Vulnerability Requires Immediate Update
- Amazon Quick Gets Microsoft Purview Integration for Data Loss Prevention
- OpenSearch Alerting Plugin: Authorization Bypass Requires Immediate Patching
- OpenAI's Cyber Defense Models Now on Amazon Bedrock
- Strands Agents Tools Hit by Memory Access Vulnerability
- Amazon Bedrock AgentCore Security Flaw Lets Users Bypass AI Safety Guards
- AWS Amazon MQ MCP Server: Critical Credential Leak via Prompt Injection
- AWS Security Hub MCP App Lands in Claude Desktop
- smithy-rs Recursion Bug Causes DoS – Update Your AWS SDK for Rust Now
- AWS Load Balancer Controller: Cross-Namespace Traffic Interception Vulnerability (CVE-2026-15738)