A sophisticated supply chain attack saw threat actors compromise Qubole's AWS identity and access management (IAM) credentials, leading to the exfiltration of sensitive data from numerous customer cloud environments.
Amazon Web Services has introduced Strands Box, an open-source security sandbox designed to prevent autonomous AI agents from executing unauthorised actions through behavioural policies and system isolation.
Vulnerabilities in the Amazon Bedrock AgentCore Python SDK could enable command execution within AI sandboxes, potentially exposing AWS credentials.
A mass-scanning campaign is targeting internet-exposed Vite development servers to exfiltrate cloud credentials and environment configuration files.
