Skip to content
Threat Feed
Subscribe

Product

Amazon Machine Image

2 briefs RSS
high advisory

AWS EC2 AMI Shared with Another Account

Adversaries with existing AWS access may exfiltrate sensitive data by sharing Amazon Machine Images (AMIs) containing secrets, bash histories, or code artifacts with external, attacker-controlled AWS accounts, detectable via `ModifyImageAttribute` actions in AWS CloudTrail logs.

Amazon EC2 +2 cloud aws exfiltration ami
1r 1t 4i
low advisory

AWS EC2 Deprecated AMI Discovery

A user querying for deprecated Amazon Machine Images (AMIs) in AWS via the DescribeImages API call may indicate an adversary looking for outdated and potentially vulnerable AMIs for exploitation.

Amazon EC2 +1 cloud aws ec2 discovery
2r 1t