Skip to content
Threat Feed
Subscribe

Product

AWS Security Hub

2 briefs RSS
medium advisory

Defense Evasion via Disabling AWS Security Hub

Threat actors disable AWS Security Hub to suppress centralized security findings and compliance monitoring, facilitating stealthy data exfiltration or ransomware deployment.

AWS Security Hub cloud-security defense-evasion aws
1r 1t
high advisory

AWS SecurityHub Findings Evasion via API Calls

Attackers can impair defenses by modifying or deleting findings and insights within AWS SecurityHub using API calls such as BatchUpdateFindings, DeleteInsight, UpdateFindings, and UpdateInsight.

AWS Security Hub aws cloud securityhub defense-evasion
3r 2t