Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts

[Caute_cautim]

Hi All

It appears that AWS Security Token Service (STS) has issues, so read this explanation and take action:

https://thehackernews.com/2023/12/alert-threat-actors-can-leverage-aws.html

Regards

Caute_Cautim

[Early_Adopter]

Well, we do have service providers and identity providers separated for some reason in all the pretty architecture pictures… 😛

Though in fairness to Amazon this looks like you have to audit account use, have proper procedures and watch for the little credential squirrels wheresoever they may be.