← Front PageCloud Desk
Cloud
AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console
AWS console session logging gaps enable attackers to mask their identity during post-compromise activities, requiring additional SourceIdentity configuration for proper attribution.
Summary written by editorial AI · Source link below
Attackers can take advantage of a quirk of the default AWS configuration (without SourceIdentity configured) to potentially make detecting and attributing their actions more difficult.
Continue at the source
Read the full report at Wiz BlogExternal link — opens at Wiz Blog in a new tab.
§
Continue with
More from the Cloud Desk
- Addressing protocol security gaps in multi-tenant Kubernetes3d
- Principal Problems: App Registrations, Service Principals, and the Hidden Risk of Multi-Tenant Apps3d
- LLMjacking Emerges as Thriving Cybercriminal Enterprise6d
- Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs6d
- Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation2 Nov