vendors/aws.htmlSecurity news, advisories and CVEs for AWSMon, 19 Oct 2026 15:01:23 GMT https://aws.amazon.com/security/security-bulletins/rss/2026-064-aws/12dxi99Fri, 16 Oct 2026 17:37:32 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-066-aws/v6jgfbFri, 16 Oct 2026 17:37:32 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-060-aws/buzz9tThu, 15 Oct 2026 16:37:46 GMTAWS Security Bulletins. AdvisoryAIVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-031-aws/fhur8fThu, 15 Oct 2026 16:37:03 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-028-aws/ba1bwdThu, 15 Oct 2026 16:37:03 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-048-aws/m2kqsrWed, 14 Oct 2026 19:53:01 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-054-aws/1qdgauiWed, 14 Oct 2026 19:53:01 GMTAWS Security Bulletins. AdvisoryAIVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-043-aws/1tdzswyWed, 14 Oct 2026 19:53:00 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-013-aws/lzy1lnWed, 14 Oct 2026 19:52:25 GMTAWS Security Bulletins. Advisory https://aws.amazon.com/security/security-bulletins/rss/2026-018-aws/1tbd3puWed, 14 Oct 2026 19:52:24 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-135-aws/1sl01u4Wed, 14 Oct 2026 19:48:49 GMTAWS Security Bulletins. Bulletin ID: 2026-135-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/14/2026 12:30 PM PDT Description: We identified CVE-2026-110310, an issue in Amazon S3 encryption client for .NET that could allow a remote user who can…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-049-aws/jxub6kWed, 14 Oct 2026 18:38:30 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-024-aws/1um6ntlWed, 14 Oct 2026 18:37:57 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-011-aws/g9isz5Wed, 14 Oct 2026 18:37:56 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-014-aws/hhln46Wed, 14 Oct 2026 18:37:56 GMTAWS Security Bulletins. Advisory https://www.helpnetsecurity.com/2026/10/13/gitlab-ci-cd-regular-expression-compiler-vulnerability-cve-2026-97229/90t0klTue, 13 Oct 2026 09:19:45 GMTHelp Net Security (+3 more sources). GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is…VulnerabilityResearchZero-dayAdvisory https://www.theregister.com/security/2026/10/09/aws-agentcore-security-undone-by-prompt-requesting-credentials/5302436os6iemFri, 09 Oct 2026 19:15:48 GMTThe Register. Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier https://aws.amazon.com/security/security-bulletins/rss/2026-133-aws/1gs75omFri, 09 Oct 2026 18:13:24 GMTAWS Security Bulletins. Bulletin ID: 2026-133-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/09/2026 11:00 AM PDT Description: AWS Amplify API Category is a CDK Construct library for defining GraphQL data models with authorization rules as AWS…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-132-aws/7qoxcdFri, 09 Oct 2026 15:56:44 GMTAWS Security Bulletins. Bulletin ID: 2026-132-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/09/2026 08:30 AM PDT Description: AWS Tools for PowerShell V5 lets developers and administrators manage their AWS services from the PowerShell scripting…AdvisoryVulnerability https://www.darkreading.com/cloud-security/agentcorruption-aws-environments-at-risk-single-promptzl4iwfThu, 08 Oct 2026 20:39:44 GMTDark Reading. A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.Vulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-131-aws/1qlvshkThu, 08 Oct 2026 19:44:26 GMTAWS Security Bulletins. Bulletin ID: 2026-131-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/08/2026 12:30 PM PDT Description: AWS CDK is an open source framework that allows customers to build cloud infrastructure using their favorite programming…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-130-aws/1sqofpjThu, 08 Oct 2026 19:29:19 GMTAWS Security Bulletins. Bulletin ID: 2026-130-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/08/2026 11:30 AM PDT Description: Amazon Agent Plugins for AWS is an open source collection of plugins that extends supported AI coding agents with…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-129-aws/nv0qjdThu, 08 Oct 2026 17:43:09 GMTAWS Security Bulletins. Bulletin ID: 2026-129-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/08/2026 10:30 PM PDT Description: AWS Toolkit for Visual Studio Code is an open source extension that lets developers work with AWS services, including…AdvisoryVulnerability https://www.malwarebytes.com/blog/news/2026/10/amazon-has-an-uncomfortably-personal-profile-on-you-check-yours-nowt715jkThu, 08 Oct 2026 12:29:38 GMTMalwarebytes Labs. Amazon thinks it knows your body, your family, and your life. You didn't sign up for it, and we couldn't find a way to opt-out.Research https://aws.amazon.com/security/security-bulletins/rss/2026-128-aws/1x0366aWed, 07 Oct 2026 20:19:18 GMTAWS Security Bulletins. Bulletin ID: 2026-128-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/07/2026 13:00 PM PDT Description: Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-126-aws/7muo6gWed, 07 Oct 2026 18:25:26 GMTAWS Security Bulletins. Bulletin ID: 2026-126-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/06/2026 13:00 PM PDT Description: QnABot on AWS is a sample solution of a multi-channel, multi-language conversational interface (chatbot) that responds to…AdvisoryVulnerability https://www.theregister.com/ai-and-ml/2026/10/07/aws-launches-open-source-ai-agent-sandbox-to-prevent-yolo-mode-disasters/5301687v5kqgrWed, 07 Oct 2026 17:42:06 GMTThe Register. Strands Box is the latest open source AI control tool from the cloud giant; like its predecessors, it promises tighter reins on autonomous agentsAI https://securitylabs.datadoghq.com/articles/beyond-valid-credentials-how-exposed-aws-keys-are-tested-for-amazon-bedrock-access/wzr3vkTue, 06 Oct 2026 00:00:00 GMTDatadog Security Labs. In this post, we share LLM-specific validation patterns that attackers use to test exposed AWS credentials for Amazon Bedrock access.Research https://aws.amazon.com/security/security-bulletins/rss/2026-125-aws/148qldpFri, 02 Oct 2026 20:25:48 GMTAWS Security Bulletins. Bulletin ID: 2026-125-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/02/2026 13:00 PM PDT Description: Amazon SageMaker Unified Studio is an AWS service that unifies data, analytics, and AI development. It lets you find and…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-124-aws/1wua3cmFri, 02 Oct 2026 19:21:29 GMTAWS Security Bulletins. Bulletin ID: 2026-124-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/02/2026 12:00 PM PDT Description: Loom is an AWS Labs open-source AI agent orchestration platform. We have identified and addressed three issues in Loom for…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-120-aws/fl4iqyFri, 02 Oct 2026 16:38:11 GMTAWS Security Bulletins. Bulletin ID: 2026-120-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 08:30 AM PDT Description: The Amazon EFS CSI Driver is a Container Storage Interface driver that allows Kubernetes clusters to use Amazon Elastic…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-123-aws/inyikrThu, 01 Oct 2026 21:15:48 GMTAWS Security Bulletins. Bulletin ID: 2026-123-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 14:00 PM PDT Description: Powertools for AWS Lambda (Python) is a developer toolkit that implements serverless best practices and increases…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-122-aws/ae6id8Thu, 01 Oct 2026 20:50:19 GMTAWS Security Bulletins. Bulletin ID: 2026-122-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 13:30 PM PDT Description: Amazon Ion Python is an open-source Python implementation of the Amazon Ion data notation. We identified CVE-2026-104020,…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-121-aws/d11xltThu, 01 Oct 2026 18:16:35 GMTAWS Security Bulletins. Bulletin ID: 2026-121-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 10:30 AM PDT Description: security-agent-mcp-server is an open-source Model Context Protocol (MCP) server, published by AWS in the awslabs/mcp…AdvisoryVulnerabilityAI https://www.infosecurity-magazine.com/news/aws-agentcore-sdk-flaws-ai/18x8xliTue, 29 Sep 2026 14:00:00 GMTInfosecurity Magazine. AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentialsVulnerability https://www.wiz.io/blog/blue-agent-data-exfiltration-investigationf3wfwhTue, 29 Sep 2026 12:42:40 GMTWiz Research. See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration toolingResearch https://aws.amazon.com/security/security-bulletins/rss/2026-118-aws/1qmps4tThu, 24 Sep 2026 19:17:16 GMTAWS Security Bulletins. Bulletin ID: 2026-118-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/24/2026 12:00 PM PDT Description: pgcollection is an open source extension to PostgreSQL. We identified CVE-2026-96883, an issue in pgcollection's type…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-047-aws/1revjkeTue, 22 Sep 2026 19:49:09 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-051-aws/fzybi5Tue, 22 Sep 2026 19:49:09 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-050-aws/18lhth2Tue, 22 Sep 2026 19:49:08 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-053-aws/1qsewjbTue, 22 Sep 2026 19:49:08 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-057-aws/1tgaaobTue, 22 Sep 2026 19:48:47 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-065-aws/j826eeTue, 22 Sep 2026 19:48:46 GMTAWS Security Bulletins. AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-063-aws/ovvpkcTue, 22 Sep 2026 19:48:45 GMTAWS Security Bulletins. AdvisoryAILaw & policyVulnerability https://unit42.paloaltonetworks.com/detecting-exposed-aws-iam-credentials/tq7r6jMon, 21 Sep 2026 10:00:13 GMTUnit 42. We explore how AWS neutralizes exposed IAM credentials using managed policies, detailing GitHub secret scanning and CloudTrail monitoring strategies.Research