A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could have been potentially exploited to stage a multitude of attacks, according to cloud security firm Lightspin. “By exploiting this vulnerability, a malicious actor could delete all images in the Amazon ECR Public Gallery or update the image contents […]
Amazon Web Services (AWS) has resolved a cross-tenant vulnerability in its platform that could be weaponized by an attacker to gain unauthorized access to resources. The issue relates to a confused deputy problem, a type of privilege escalation where a program that doesn’t have permission to perform an action can coerce a more-privileged entity to […]
Amazon, in December 2021, patched a high severity vulnerability affecting its Photos app for Android that could have been exploited to steal a user’s access tokens. “The Amazon access token is used to authenticate the user across multiple Amazon APIs, some of which contain personal data such as full name, email, and address,” Checkmarx researchers […]
A 36-year-old former Amazon employee was convicted of wire fraud and computer intrusions in the U.S. for her role in the theft of personal data of no fewer than 100 million people in the 2019 Capital One breach. Paige Thompson, who operated under the online alias “erratic” and worked for the tech giant till 2016, […]
Amazon Linux team is advising its clients about a critical vulnerability affecting Linux servers. Amazon Linux 2 is a Linux operating system from Amazon Web Services (AWS). It offers a security-focused, stable, and high-performance OS to develop and run cloud applications. In 2021, critical vulnerabilities in the Java log4j package were published that affected Apache […]
Researchers published research detailing a method for taking control of smart speakers, which would allow threat actors to make phone calls, access e-commerce websites, and control appliances, doors, and lockers linked to these devices. According to the report, the attack works by using the speaker to issue voice commands, as long as the command issued […]
We have been bombarded left, right, and center for some time now with streaming services, TV subscriptions, and other entertainment technology. It can be hard to keep up with the latest offerings or even fully understand what they all do with such an overload. One such technology which is incredibly popular is the Amazon fire […]
Amazon Web Service (AWS) is suffering a major service outage that is affecting popular platforms in regions where the company provides services. The cloud service and hosting provider Amazon Web Service (AWS) is going through a service outage affecting popular platforms such as Netflix, Roku, Disney Plus, gaming platforms including PUBG, Valorant, and League of […]
The call center ran a fake Amazon technical support call center in South Delhi – Now, 26 of its “employees” have been arrested. The Delhi Police have shut down a fake call center alleged to have been operational for the past seven months and scamming US citizens. Allegedly, the call center employees duped US citizens […]
Amazon earlier this April addressed a critical vulnerability in its Kindle e-book reader platform that could have been potentially exploited to take full control over a user’s device, resulting in the theft of sensitive information by just deploying a malicious e-book. “By sending Kindle users a single malicious e-book, a threat actor could have stolen […]
Most people are fans of the convenience Amazon brings to online shopping, and that’s precisely what cybercriminals are betting on.
During the early hours of this Tuesday thousands of users discovered that some of the most popular websites around the world were out of service or did not load properly due to an interruption linked to an unknown cause. Users report that when trying to access the affected websites, “Connection Error”, “IO Error” and even […]
The database contained 7GB worth of data including fake Amazon product reviews and PayPal email addresses of scammers among other sensitive data. Whoever uses Amazon makes up their mind about a particular product after checking out its reviews. But what if the reviews are fake and misleading? The IT security researchers at SafetyDetectives discovered a China-based […]
A big share of Amazon’s success is contributed by its cloud services, known as Amazon Web Services (AWS). But the e-commerce giant has to make constant efforts to stay in the game when there are robust competitors like Google Cloud and Microsoft Azure. Moving along the similar lines, Amazon is working on a new server […]
Hackathons happen to be an all-out favorite for the cybersecurity industry for their renewed sense of competing in real-time – testing your skillset against the best. Pwn2Own, one such yearly conference kicked off today in Tokyo with teams competing in exploiting bugs in the systems of well-reputed companies. Pwn2Own follows an infrastructure in which if […]
Security researchers at Bitdefender have discovered a high-severity security vulnerability in Amazon’s Ring Video Doorbell Pro devices that could allow nearby attackers to steal your WiFi password and launch a variety of cyberattacks using MitM against other devices connected to the same network. In case you don’t own one of these, Amazon’s Ring Video Doorbell […]
According to digital forensics specialists, Amazon Web Services (AWS), the technology giant’s cloud computing services division, has been the victim of a sustained denial of service (DoS) attack. Apparently, the threat actors kept the attack for more than eight hours. The attack affected the company’s DNS Router 53 service, although many other outages were reported […]
A report by vulnerability testing experts states that a relatively old WiFi vulnerability affects millions of Amazon Echo and Kindle devices from different generations. This flaw, known as a KRACK attack, allows threat actors to deploy Man-in-The-Middle (MiTM) attacks to access a WiFi network with WPA2 protection. The Key Reinstallation Attack (KRACK) vulnerability was first […]
Amazon is one of the biggest e-commerce websites of all time with millions of products listed on its platform. To keep the products competitive, it frequently fluctuates the price of its products. While this maximizes profits for Amazon retailers, it can be disastrous for consumers and small business owners who paid a high price for […]
On Thursday, Amazon CEO Jeff Bezos ordered 100,000 Rivian Electric Trucks for its delivery service. The huge order is part of an initiative made by Amazon to make the company carbon neutral by 2040. Thus, fulfilling the United Nations Paris Agreement 10 years before its due date in 2050. Amazon will deploy all 100k vehicles […]
A new Amazon phishing scam email is circulating, that tricks users into handing over their personal as well as financial information including credit card information to online crooks. Usually, Hackread covers phishing scams identified and alerted by cyber security companies but in the latest one, the targeted scam was aimed at my supposed Amazon account. […]