The opportunistic “SCARLETEEL” attack on a firm’s Amazon Web Services account turns into targeted data theft after the intruder uses an overpermissioned service to jump into cloud system.
from Dark Reading https://ift.tt/8xTC0g6
via IFTTT
Pernicious Permissions: How Kubernetes Cryptomining Became an AWS Cloud Data Heist
Cloud / Sec / Labs 