AWS Security Digest · Issue #8

AWS Security Digest

Issue #8

Monday · March 01, 2021

🥗 AWS security blogs

🍛 Reddit threads on r/aws

📌 Inbox

Security Newsletter - VMWare vCenter vulnerable to critical exploit. Microsoft releases CodeQL queries for Solarwinds. Hiding c2 servers in Bitcoin transactions.

📌 r/netsec

I recently discovered that all versions of Windows Server 2012 (but not Server 2012 R2) are affected by a DLL hijacking vulnerability that can be exploited for privilege escalation. This bug can be triggered by a regular user and does not require a system reboot. Here is my writeup:
PortSwigger Research: Top 10 web hacking techniques of 2020

📌 r/cloudsecurity

What AWS training would be most relevant to someone in the C-suite?

Get every AWS security change,
on a plate every Monday.

6,700+ engineers, builders and CISOs let us diff the AWS changelog every week.