Browsing tag
A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could have been potentially exploited to stage a multitude of attacks, according to cloud security firm Lightspin. “By exploiting this vulnerability, a malicious actor could delete all images in the Amazon ECR Public Gallery or update the image contents […]
Amazon Web Services (AWS) has resolved a cross-tenant vulnerability in its platform that could be weaponized by an attacker to gain unauthorized access to resources. The issue relates to a confused deputy problem, a type of privilege escalation where a program that doesn’t have permission to perform an action can coerce a more-privileged entity to […]
Amazon, in December 2021, patched a high severity vulnerability affecting its Photos app for Android that could have been exploited to steal a user’s access tokens. “The Amazon access token is used to authenticate the user across multiple Amazon APIs, some of which contain personal data such as full name, email, and address,” Checkmarx researchers […]
A 36-year-old former Amazon employee was convicted of wire fraud and computer intrusions in the U.S. for her role in the theft of personal data of no fewer than 100 million people in the 2019 Capital One breach. Paige Thompson, who operated under the online alias “erratic” and worked for the tech giant till 2016, […]
The clients affected by the incident involving a misconfigured Amazon S3 bucket include Global 500 company Ericsson and Fortune 500 company Cisco. IT security researchers at Website Planet Security Team discovered a misconfigured Amazon S3 bucket that was owned by D.W. Morgan, a supply chain management and logistics giant D.W. Morgan. The company is headquartered […]
We have been bombarded left, right, and center for some time now with streaming services, TV subscriptions, and other entertainment technology. It can be hard to keep up with the latest offerings or even fully understand what they all do with such an overload. One such technology which is incredibly popular is the Amazon fire […]
Sennheiser left personal data of over 28,000 customers exposed on a misconfigured Amazon Web Services (AWS) server. According to a report from vpnMentor, the German audio equipment manufacturer, Sennheiser left an unsecured Amazon Web Services (AWS) server online. The server stored around 55GB of information on over 28,000 Sennheiser customers. AWS buckets are popular among […]
Amazon Web Service (AWS) is suffering a major service outage that is affecting popular platforms in regions where the company provides services. The cloud service and hosting provider Amazon Web Service (AWS) is going through a service outage affecting popular platforms such as Netflix, Roku, Disney Plus, gaming platforms including PUBG, Valorant, and League of […]
Curious about Ring Security’s newest innovation in home security? Here is the rundown on Ring’s new Virtual Security Guard, a home security alarm with real people behind the screens monitoring your safety. This comes as an advancement with great precision and efficiency for your home protection needs. After reading this, you’ll be rushing to join […]
Twitch has undergone a massive hack resulting in leaking the source code for its unreleased streaming service, creator payout details, and other sensitive information. The attack was carried out by a group that has labeled the leaked data as “Part One,” which indicates more installments will be coming up soon. According to sources, Twitch is […]
Twitch Data Breach took place a couple of days ago when an anonymous hacker published a torrent file with 125 GB worth of data on the 4chan messaging board. As reported by Hackread.com, Amazon.com’s live streaming e-sports platform, Twitch, was a victim of a massive data breach where the company reportedly was hacked in its […]
The misconfigured S3 bucket was owned by SeniorAdvisor, a consumer ratings and reviews website. WizCase’s cybersecurity researchers discovered a misconfigured Amazon S3 bucket owned by SeniorAdvisor, one of the leading consumer ratings and reviews websites for senior care/services in the USA and Canada. The company aids senior citizens in finding care options in their localities. […]
The trove of data was left exposed unencrypted and without any password or security authentication. The team of IT security researchers at WizCase team discovered a misconfigured Amazon S3 bucket belonging to the online art retail service Artwork Archive. The incident affected around 7,000 customers including galleries, artists, and collectors. Private and Purchase Data Exposed […]
The call center ran a fake Amazon technical support call center in South Delhi – Now, 26 of its “employees” have been arrested. The Delhi Police have shut down a fake call center alleged to have been operational for the past seven months and scamming US citizens. Allegedly, the call center employees duped US citizens […]
The database contained 7GB worth of data including fake Amazon product reviews and PayPal email addresses of scammers among other sensitive data. Whoever uses Amazon makes up their mind about a particular product after checking out its reviews. But what if the reviews are fake and misleading? The IT security researchers at SafetyDetectives discovered a China-based […]
A big share of Amazon’s success is contributed by its cloud services, known as Amazon Web Services (AWS). But the e-commerce giant has to make constant efforts to stay in the game when there are robust competitors like Google Cloud and Microsoft Azure. Moving along the similar lines, Amazon is working on a new server […]
Hackathons happen to be an all-out favorite for the cybersecurity industry for their renewed sense of competing in real-time – testing your skillset against the best. Pwn2Own, one such yearly conference kicked off today in Tokyo with teams competing in exploiting bugs in the systems of well-reputed companies. Pwn2Own follows an infrastructure in which if […]
This laser attack can also be used to unlock various vehicles (e.g., Tesla and Ford). Recently, researchers from the University of Electro-Communications based in Japan and the University of Michigan based in the United States discovered that certain tools such as laser beams and flashlights can be used to control certain voice-controlled digital assistants. This […]
Under “usual circumstances,” AWS makes headlines for exposing databases of companies using its services. A few days ago (Oct 22, 2019), the world’s large cloud services provider – Amazon Web Services (AWS) – was hit by a series of DDoS attacks (Distributed Denial of Service) resulting in portions of it going offline for several hours. […]
Amazon is one of the biggest e-commerce websites of all time with millions of products listed on its platform. To keep the products competitive, it frequently fluctuates the price of its products. While this maximizes profits for Amazon retailers, it can be disastrous for consumers and small business owners who paid a high price for […]
Machine Learning for Threat Intuitive Analysis The goal of the ManaTI project is to develop machine learning techniques to assist an intuitive threat analyst to speed the discovery of new security problems. The machine learning will contribute to the analysis by finding new relationships and inferences. The project will include the development of a […]