Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors [...]

Plenty of time for bad actors to grab data or hit you with a giant bill [...]

Initial assessment says customer data spared while users wonder what else may have slipped out [...]

Cybercrooks ruin engineers' weekends with Saturday attack [...]

When it comes to AWS authentication, relying on long-term credentials, such as AWS Identity and Access Management (IAM) access keys, introduces unnecessary risks; including potential credential exposure, unauthorized sharing, or theft. In this post, I present five common use cases where AWS customers traditionally use IAM access keys and …