Amazon Linux
A Linux distribution by Amazon Web Services, affected by CVE-2026-64600. Default installations with reflink-enabled XFS are vulnerable.
Tag: AWS
AWS Kiro IDE – Agentic Coding IDE
Kiro is AWS's agentic coding IDE that can run shell commands, fetch URLs, and edit files. It was affected by a vulnerability…
AWS Kiro Flaw: Hidden Web Page Text Could Trigger Remote Code Execution
A critical vulnerability in AWS Kiro, an agentic coding IDE, allowed a poisoned web page to rewrite its configuration file and execute…
Cursor Flaw Enables Code Execution via Malicious Cloned Repositories on Windows
A critical vulnerability in Cursor, an AI-powered code editor, allows arbitrary code execution on Windows when a user opens a cloned repository…
OAuth Client ID Spoofing Exploits Blind Spot in Microsoft Entra ID to Validate Stolen Credentials
Proofpoint has uncovered a novel evasion technique called OAuth client ID spoofing, exploited by at least two threat actors to validate stolen…
UNK_pyreq2323: OAuth Client ID Spoofing Campaign Targeting Microsoft Entra ID
UNK_pyreq2323 is a threat cluster that exploited OAuth client ID spoofing from January to March 2026, using over 700,000 spoofed client IDs…
Amazon Simple Email Service (SES)
Amazon SES is a cloud-based email delivery service used by Forg365 to send phishing emails, leveraging legitimate infrastructure to evade detection.
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Cybersecurity researchers at Huntress have identified an intrusion where an unknown threat actor used a suspected AI-generated PowerShell script to enumerate Active…
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup…
AWS Bedrock Agents: Managed AI Agent Service
AWS Bedrock Agents is a managed service from Amazon Web Services that enables developers to build and deploy AI agents. It integrates…