Skip to content
Threat Feed

Product

Splunk Add-on for Amazon Web Services

2 briefs RSS
medium advisory

AWS CloudTrail Update for Defense Evasion

Attackers may attempt to evade detection by altering CloudTrail logging configurations, such as changing multi-regional logging to a single region, which impairs the logging of their activities and hinders incident response.

CloudTrail +4 aws defense-evasion cloud
2r 1t
high advisory

AWS Network ACL Created with All Ports Open

The analytic detects the creation or replacement of AWS Network Access Control Lists (ACLs) with rules that allow all traffic from a specified CIDR block, potentially exposing the network to unauthorized access and increasing the risk of data breaches.

CloudTrail +5 aws network-acl misconfiguration cloud security-group
2r