Skip to content
Threat Feed
Subscribe

Product

SageMaker

1 brief RSS
high advisory

Suspicious Script Injection in AWS SageMaker Lifecycle Configurations

Threat actors are targeting AWS SageMaker notebook lifecycle configurations to achieve persistent, root-level code execution by injecting malicious scripts that trigger automatically upon instance startup.

SageMaker cloud aws persistence execution
2t