Researchers identified a new attack vector, “Shadow Resources,” enabling resource squatting through predictable S3 bucket naming conventions. By leveraging “Bucket Monopoly,” an attacker can significantly increase the likelihood of compromising accounts, which led to the discovery of critical vulnerabilities in six AWS services, allowing for remote code execution, full-service takeover, data exfiltration, and denial of … Continue reading Critical AWS Vulnerabilities Allow Attackers to Perform Remote Code Execution