Monday,
May 19, 2025

🥖 Palette Cleanser

Hello there, gossip enjoyer. It's been another eventful week in the clouds.

AWS itself had some ups and downs. 👍 Law enforcement seized nine DDoS-for-Hire webpages, thanks to assistance from Akamai, Amazon Web Services, Cloudflare, DigitalOcean, among others. 👎 AWS sent a batch of account-suspension warning emails claiming accounts “may have been inappropriately accessed by a third-party” and then proceeded to follow through, taking down some businesses. It’s not clear why this happened, but there were many flustered Reddit posters, some of whom got responses like “the service team confirmed that your account is not at risk of compromise (i.e., this was a false positive trigger)”. If anyone from AWS wants to comment, hit me up.

Also this week, Coinbase filed a disclosure with the SEC about a breach of some customer data that was accessed by their own support personnel. The video announcement by the CEO is a masterpiece in incident comms. The reason I include this story is that most of us work for businesses, we have to provide support to our users, and that is hard to do securely—even if you are Coinbase. Kane Narraway posted a short list of things you can do to reduce the risk of this happening to your business, and it should be mandatory reading.

Finally, if you’re tired of fixing vulnerabilities in Go container images, you might enjoy the near-zero-CVE base images Wiz published this week. If you are looking for other options, or want to compare them to official distribution images, take a look at the base-image vulnerability comparison site from James Berthoty.

Have feedback about AWS Security Digest? Tell us here. This issue is also available to share online.

📋 Chef's selections

Bonus: China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures

🥗 AWS security blogs

🍛 Reddit threads on r/aws

💸 Sponsor shoutout

Pleri is your AI-powered teammate built to boost your cloud security team — faster reactions, smarter actions, no extra headcount. Meet Pleri and see her in action.

🤖 Dessert

Dessert is made by robots, for those that enjoy the industrial content.

🧁 IAM permission changes

🍪 API changes

🍹 IAM managed policy changes

☕ CloudFormation resource changes

🎮 Amazon Linux vulnerabilities

📺 AWS security bulletins

    No bulletins this week.

🚬 Security documentation changes

YouTube Twitter LinkedIn

Crafted with ❤️ by Plerion. We simplify cloud security.