- Published
- Source
- AWS Security Blog
- Filed under
- Cloud, AI attacks, Malware & exploits
We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an unauthenticated or low-privilege position (an endpoint URL and a one-line hint, no…
Cloud checks worth doing
- Know every account and subscription you run – the forgotten ones are where exposures hide.
- Nothing public by default: storage, keys and admin consoles closed to the internet, and code scanned for secrets.
- Turn on the provider's audit logs, and alert on new access keys, policy changes and anything made public.
Defender’s notebook
The attacker technique behind this story, in MITRE’s terms – and what to check in your own estate.
Exploit Public-Facing Application
Initial AccessWhat a defender checks
- Find every internet-facing instance of the affected product.
- Patch, or apply the vendor's mitigation now – CISA's KEV list gives a deadline.
- Look for signs it was exploited before you patched: web shells, new accounts, odd outbound traffic.
Build the skillBlue Team Analyst · Vulnerability Management
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
MyCyberWay training
Blue Team Engineer · Cloud Security Engineering
Most cloud breaches are configuration. Learn to get it right.
Blue Team Engineer covers CSPM at scale, CIS hardening, cloud-native detection and response, and mapping Azure controls to AWS and GCP – configured hands-on in your own tenants.
- CSPM and CIS hardening
- Cloud-native detection and response
- Azure, AWS and GCP
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
