What Public AWS Breaches Actually Teach Us
A decade of public AWS breaches shows attackers log in rather than break in: stolen keys, leaked secrets, IMDSv1. What that means for your priorities.
Read article →Blog
AWS attacks, detections and guardrails, backed by public data and our own fire drills.
Your AWS KEV List: Why CVEs Miss Cloud Risk
CISA KEV is great for patching, but most AWS breaches never get a CVE. Where KEV fits in AWS, and nine exploited conditions to fix alongside it.
Read article →LLMjacking on Amazon Bedrock: How to Stop It
How stolen AWS keys run Amazon Bedrock on your bill, the SCP that blocks the payoff, and the CloudTrail signals that give LLMjacking away.
Read article →Stopping S3 Ransomware with One RCP
How Codefinger ransomed S3 data with stolen keys and SSE-C, the 15-line RCP that blocks it org-wide, and how to prove the block works.
Read article →How to Test GuardDuty with Real Attacks
Published tests show GuardDuty misses common AWS attacks. How to run real attack techniques in a sandbox, read the results and close the gaps.
Read article →