Episode Summary
Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!
Episode Show Notes & Transcript
Links:
- This collection of best practices for managing root users at scale in AWS is worth a read
- 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms.
- 1Health is this week's winner of the S3 Bucket Negligence Award
- Barracuda advises customers to rip the entire device out, throw it away, and replace it entirely.
- S3 buckets being used in attacks on npm packages
- Issue with AWS Directory Service EnableRoleAccess
- Tool of the week: xeol is an end-of-life package scanner.
