Skip to content
Threat Feed
Subscribe

Tag

Identity-Audit

2 briefs RSS
low advisory

AWS STS AssumeRole with New MFA Device

Adversaries may register new MFA devices for compromised AWS IAM roles to maintain persistence, escalate privileges, or facilitate lateral movement by assuming roles via the AWS Security Token Service (STS).

AWS Security Token Service +1 cloud aws persistence identity-audit
3t
high advisory

LLMjacking via Compromised AWS Long-Term IAM Credentials

Adversaries are abusing stolen long-term AWS IAM access keys to perform unauthorized reconnaissance and high-cost model inference within Amazon Bedrock.

Amazon Bedrock cloud llm aws llmjacking identity-audit
1r 2t