Bulletin ID: 2026-051-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/01/2026 12:45 PM PDT Description: The AWS Advanced JDBC Wrapper is an open-source JDBC driver wrapper that extends a JDBC driver to enable Amazon Aurora and AWS Cloud features such as failover handling and caching. We identified CVE-2026-14265, an issue in the RemoteQueryCachePlugin of the AWS Advanced JDBC Wrapper. When this plugin is enabled, query results read from the shared Redis/Valkey cache are deserialized without class filtering. An actor with write access to the shared cache infrastructure could insert a crafted serialized Java object that, when read by an application, results in execution of arbitrary code on the application server. Impacted versions: >=3.3.0 AND <=4.0.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Bulletin ID: 2026-050-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/01/2026 12:15 PM PDT Description: AWS CDK (aws-cdk-lib) is an open-source framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified CVE-2026-13760, an OS command injection issue in the NodejsFunction Docker bundling pipeline in aws-cdk-lib before 2.260.0 that could allow an actor who controls dependency version strings in a project's package.json file to execute arbitrary commands on the host running the CDK toolchain via injected shell metacharacters in the OsCommand helper. This issue requires the actor to control the content of a package.json dependency version string that is processed during Docker-based bundling with nodeModules specified. Impacted versions: < 2.260.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Bulletin ID: 2026-048-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/29/2026 11:15 PM PDT Description: AWS WAF is a web application firewall that monitors the HTTP(S) requests that are forwarded to your protected web application resources. We identified CVE-2026-13762 and CVE-2026-13763, which are issues affecting HTTP/2 multi-frame request body inspection by AWS WAF. CVE-2026-13762 affects AWS WAF deployment with CloudFront. This issue was remediated server-side; no customer action is required. CVE-2026-13763 affects AWS WAF deployment with AWS Application Load Balancer (ALB). Under certain conditions, a crafted multi-frame HTTP/2 request could cause only a partial request body to be inspected. This issue has been addressed on ALB, and customers can ensure full protection by configuring how AWS WAF inspects HTTP/2 request bodies on their ALB. Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Bulletin ID: 2026-047-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/23/2026 09:30 AM PDT Description: Language Servers for AWS provide the underlying language-server runtime that powers Amazon Q Developer's AI coding assistance across its IDE plugins (Visual Studio Code, JetBrains, Eclipse, and Visual Studio). We identified CVE-2026-12957, an improper trust boundary enforcement issue in Language Servers for AWS before version 1.65.0. If a local user opens a maliciously crafted workspace, any commands within the project configuration files may be automatically executed. This issue requires the user to trust the workspace when prompted. We identified CVE-2026-12958, a missing symlink-validation issue in Language Servers for AWS before version 1.69.0. This may occur when a local user opens a workspace with a maliciously crafted symlink that resolves to a file path outside the workspace trust boundary. These issues affect the Amazon Q Developer IDE plugins, which bundle Language Servers for AWS. Both issues are remediated in Language Servers for AWS version 1.69.0. Affected products & versions: - Language Servers for AWS: < 1.69. - Amazon Q Developer for Visual Studio Code: < 2.20 - Amazon Q Developer for JetBains: < 4.3 - Amazon Q Developer for Eclipse: < 2.7.4 - AWS Toolkit with Amazon Q for Visual Studio: < 1.94.0.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Bulletin ID: 2026-045-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/15/2026 11:45 AM PDT Description: Kiro IDE is an agentic development environment that makes it easy for developers to ship real engineering work with the help of AI agents. We identified CVE-2026-11931, where incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or processes via world-readable permissions (0644) instead of owner-restricted permissions (0600). Impacted versions: < 0.11.133 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Bulletin ID: 2026-030-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 05/13/2026 10:00 PM PDT This is an ongoing issue. This bulletin will be updated as more information becomes available. Description: AWS is aware of the copy.fail or DirtyFrag class of issues - a set of privilege escalation issues affecting the Linux Kernel. We will update this bulletin as more information becomes available. Please see below for current patching timelines for affected services related to the Copy.fail kernel issue and all its variants. AWS recommends that customers apply all updates addressing these issues as soon as they are available. See more details at Security Bulletin (ID: 2026-030-AWS).
This entry references issues related to AWS Research and Engineering Studio (RES) but provides no specific details about the nature of the issues, vulnerabilities, or exploits.
This content discusses cybersecurity challenges faced by small and medium-sized businesses (SMBs), focusing on vulnerabilities in people, processes, and technology that can lead to cyberattacks. It highlights how attackers exploit gaps such as unpatched software, insufficient employee training, and inadequate protection of cloud infrastructure. A real-world case study describes an ERP system breach during cloud migration, where attackers used phishing and exploited unpatched vulnerabilities to gain administrator access and steal confidential data. The article emphasizes the importance of targeted employee training, structured patch management, and appropriate technological defenses to mitigate risks.
This analysis discusses the emerging security challenge of managing AI agent identities in cloud environments. Traditional identity categories—human and non-human identities (NHIs)—are insufficient for AI agents, which make autonomous, adaptive decisions and interact dynamically with external systems. Microsoft has introduced the Entra Agent ID model, a specialized identity framework designed to securely manage AI agents across platforms. Tenable One Cloud Exposure now supports discovery and inventory of these AI agent identities to improve visibility and reduce security blind spots. The report emphasizes avoiding assigning human or over-privileged service accounts to AI agents and adopting official identity models like Microsoft Entra Agent ID. The complexity and novelty of AI agent identities create new attack surfaces, including supply-chain risks from cross-tenant links in identity blueprints.
ConnectWise suspended its Cloud Backup, SaaS Security, and Cloud Management services following a cyberattack involving compromised credentials that allowed unauthorized access to Microsoft 365 tenants. The attacker used a stolen Cloud Backup credential to sign into numerous tenants, with evidence of scripted access attempts and privilege escalations. ConnectWise shut down affected services to contain the incident and continues remediation and security validation. Customers' backups remain encrypted and protected, with no evidence of unauthorized access to backup data. The company has not provided a timeline for service restoration.
This analysis discusses the emerging insider risk posed by autonomous software agents that operate with access to company data, applications, and systems. While these agents are not inherently malicious, their capabilities and access can lead to mistakes, manipulation, or compromise. Microsoft emphasizes the need for a trust architecture that separates intelligence supply from authority, ensuring controls over agent actions reside outside the agent itself. Project Perception and Microsoft Agent 365 provide continuous discovery, identity management, containment, and adaptive protection for agents, treating them as accountable identities with scoped permissions. The approach includes sandboxed runtimes, policy-driven access, and continuous risk-based adjustments to agent authority to mitigate potential insider threats from these non-deterministic intelligent tools.
Hackers exploited a supply-chain attack via ConnectWise's Cloud Backup service to gain unauthorized access to Microsoft 365 tenants. The attackers used compromised application identities (service principals) with previously granted permissions to access tenant data without triggering multi-factor authentication. ConnectWise shut down the Cloud Backup service to prevent further unauthorized access and is investigating the incident. No evidence currently indicates that backup archives were compromised, but attackers performed reconnaissance and persistence activities in some tenants.
An issue in the Linux kernel's virtio-net/TAP networking path affects KVM-based hypervisors running unpatched Linux kernel versions 4.4 through 6.18. This vulnerability allows an attacker with privileged access inside a guest virtual machine to send specially crafted network packets that can corrupt host kernel memory, potentially leading to host memory disclosure or denial of service. AWS-managed compute and container services are not affected, and no action is required for customers using these services.
CVE-2026-110812 is a vulnerability in Amazon Neptune's implementation of Apache TinkerPop's Gremlin graph-import functionality. It allows an authenticated user with query permissions to submit crafted input that leads to unsafe processing of untrusted data within the query engine. This could result in unintended activity within the query engine environment. AWS recommends upgrading to fixed engine versions to mitigate this issue.
CVE-2026-110248 is a vulnerability in the Amazon SageMaker Python SDK where sensitive information, specifically plaintext repository credentials, can be inserted into log files. This occurs in the git_utils.py component before versions 3.10.0 for V3 and 2.257.3 for V2. The issue arises because the runclone_command() function does not redact credentials from subprocess error output, potentially exposing them in CloudWatch Logs when a git clone operation fails. Users should upgrade to versions 3.10.0 or later for V3 and 2.257.3 or later for V2 to remediate this issue.
Microsoft uncovered a Chinese-language cybercriminal ecosystem involving phishing kit developers, an illicit marketplace called YAM Store, and downstream threat actors. This ecosystem enables large-scale phishing campaigns targeting organizations worldwide, including in Japan, the US, Australia, and India. The phishing kits impersonate legitimate brands and facilitate credential theft. YAM Store sells fraudulently acquired Microsoft and Google cloud environments to support these operations. Microsoft and partners disrupted the primary developers and infrastructure behind this ecosystem.
Bisheng, an open-source LLM application DevOps platform, contains three vulnerabilities: a legacy SSO endpoint that allows unauthenticated account takeover and administrative access; an IDOR vulnerability exposing cross-user workflow data to authenticated users; and a missing access control in the assistant service enabling credential abuse and data disclosure prior to version 2.5.0. Two of these vulnerabilities have been patched in versions 2.5.0 and 3.0.0 respectively, while the legacy SSO bypass remains unpatched. Manual mitigations are recommended until an official fix is available.
Attackers continue to exploit gaps in multi-factor authentication (MFA) coverage by using stolen credentials to access VPNs, RDP, and Windows systems that rely solely on passwords. The issue highlights that protecting only cloud applications is insufficient, and organizations need to address authentication weaknesses across all access points to prevent unauthorized access.
SAP released security updates in October 2026 addressing 20 vulnerabilities, including a maximum-severity OAuth2 SSRF vulnerability in the Cloud SDK for Python. The flaw involves server-side request forgery related to OAuth2 implementations. No specific affected versions or detailed technical information are provided. No known exploits in the wild have been reported. SAP is not a cloud service in this context, so remediation depends on applying vendor updates.
Yandex, a Russian cloud services provider, experienced a service outage after drone attacks damaged three of its data centers. This led to the shutdown of two data centers and partial disabling of a third, causing users to lose access to their cloud files.
