Skip to content
Threat Feed
Subscribe

Product

AWS Elastic Kubernetes Service (EKS)

1 brief RSS
high advisory

AWS Lateral Movement via Kubernetes Service Account Identity Exploitation

Adversaries are exploiting Kubernetes service account tokens exchanged for AWS IAM credentials via AssumeRoleWithWebIdentity to conduct unauthorized reconnaissance, credential theft, and persistent access within AWS environments.

AWS Elastic Kubernetes Service +3 cloud aws lateral-movement credential-access discovery
4t