Tag
medium
advisory
Detecting Identity Masquerading via Behavioral Clustering
1 TTPSecurity researchers have developed a behavioral clustering model using unsupervised machine learning to differentiate between legitimate cloud functional roles and attackers masquerading as authorized identities.
AWS Identity and Access Management +1
cloud-security
identity-access-management
behavior-analysis
detection-engineering
1t
critical
advisory
Privilege Escalation in hulumi via IAM Policy Misconfiguration
3 TTPs 1 CVEhulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that permits unauthorized role lifecycle operations on af-e2e-* roles.
hulumi
privilege-escalation
cloud-security
identity-access-management
iac
vulnerability
rce
execution
3t
1c