Topic

Amazon Web Services: news, advisories and analysis

18 articlesUpdated 14 Oct 2026

CyberSecureToday covers Amazon Web Services across 18 articles published between 17 Sep 2026 and 14 Oct 2026. The coverage includes 18 vulnerability advisories. 17 advisories are rated critical or high severity.

Stories on Amazon Web Services most often intersect with Cloud Security, AWS and IAM, with Technology, Cloud & SaaS the most affected sector. The most recent story, “AWS Systems Manager (SSM) Agent OS Command Injection Flaw CVE-2026-87911 Patched”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
AWS Systems Manager (SSM) Agent OS Command Injection Flaw CVE-2026-87911 Patched
AWS resolves a high-severity OS command injection flaw in AWS Systems Manager Agent (CVE-2026-87911) affecting multi-step Run Command document execution.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSHigh
AWS IAM Identity Center Flaw Left Revoked Session Tokens Active
AWS resolves an access control flaw in IAM Identity Center and AWS CLI session handling (CVE-2026-82856) where revoked STS tokens remained temporarily active.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSHigh
AWS Bedrock Guardrails Vulnerability Enables Adversarial Safety Filter Evasion via Unicode Homoglyph Normalization (CVE-2026-80210)
AWS resolves a security bypass vulnerability in Amazon Bedrock Guardrails where adversarial Unicode homoglyph sequences evaded safety and PII masking filters.
CST Editorial Desk13 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS S3 Multi-Region Access Point Flaw Enables IAM Signature Version 4 Authorization Bypass CVE-2026-79787
AWS Security Bulletin details an authorization validation defect in S3 Multi-Region Access Point endpoints permitting IAM privilege escalation.
Daniel Okafor6 Oct 20268 min read
NewsCloud & SaaS
AWS Security Bulletin Details Argument Injection Flaw in Model Context Protocol Security Agent (CVE-2026-97662)
AWS Security Bulletin 2026-121-AWS addresses an argument injection defect in security-agent-mcp-server diff scanning that permits arbitrary file modification.
Aisha Noor5 Oct 20268 min read
ThreatsCloud & SaaSHigh
AWS Systems Manager Agent SSRF Vulnerability Allows Link-Local IMDS Credential Theft CVE-2026-89049
AWS resolves a critical SSRF vulnerability in amazon-ssm-agent where port forwarding denylist bypasses permit link-local IMDS temporary credential exfiltration.
Aisha Noor28 Sep 20268 min read
ThreatsCloud & SaaSHigh
AWS Bedrock Agent Runtime Vulnerability Exposes Temporary IAM Credentials CVE-2026-62181
AWS Security Bulletin details an environment leakage defect in Amazon Bedrock Agent action group runtimes permitting cross-session IAM credential exposure.
Aisha Noor28 Sep 20268 min read
ThreatsCloud & SaaSHigh
AWS Athena ClickHouse Connector Flaw Enables Cross-Account Secrets Manager Extraction
AWS Security Bulletin 2026-084-AWS warns of authorization flaw CVE-2026-75910 in Athena ClickHouse connector allowing arbitrary Secrets Manager data leakage.
Daniel Okafor26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Transform MCP Server Flaw Enables Arbitrary File Overwrites in Agent Workflows
AWS Security Bulletin 2026-075-AWS discloses critical path traversal flaw CVE-2026-18953 in aws-transform-mcp-server enabling unauthenticated arbitrary file overwrites.
Daniel Okafor26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS pgcollection Type Confusion Flaw Enables Remote Code Execution in PostgreSQL
AWS Security Bulletin 2026-118-AWS warns of a critical type confusion flaw CVE-2026-96883 in open-source pgcollection enabling RCE in PostgreSQL database hosts.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda
AWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSHigh
Amazon ECS Container Agent Flaw Enables Task Boundary Breakout and IAM Role Credential Hijacking
AWS resolves a container boundary escape flaw in Amazon ECS Container Agent that allowed unprivileged containers to intercept task metadata and assume host IAM roles.
Aisha Noor25 Sep 202617 min read
ThreatsCloud & SaaSHigh
Amazon Ion-C Library Recursion Flaw Triggers Cloud Service Stack Exhaustion Crashes CVE-2026-84851
AWS publishes Bulletin 2026-094-AWS for high-severity flaw CVE-2026-84851 in Amazon Ion-C library, allowing attackers to exhaust stack memory and crash services.
CST Editorial Desk24 Sep 202615 min read
ThreatsCloud & SaaSHigh
Amazon OpenSearch SQL Plugin Cursor Deserialization Flaw Enables Remote Code Execution CVE-2026-83497
AWS and OpenSearch release bulletin 2026-092-AWS for high-severity flaw CVE-2026-83497 in the SQL plugin allowing authenticated users to execute code via cursors.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSHigh
AWS Security Agent, MCP Server Flaws Let S3 Squatters Intercept Source Code
AWS patches vulnerabilities CVE-2026-87912 and CVE-2026-87913 in DevSecOps security agents and Model Context Protocol servers where predictable bucket names permit source code theft.
Aisha Noor21 Sep 202614 min read
ThreatsCloud & SaaSHigh
Amazon ECS Agent Flaw CVE-2026-7461 Permits Command Injection and Host Takeover on Windows Clusters
AWS patches high-severity flaw CVE-2026-7461 in Amazon ECS Agent for Windows allowing container escape and SYSTEM command injection via FSx volume mounts.
Mei-Lin Chen21 Sep 202613 min read
ThreatsCloud & SaaSHigh
Amazon DynamoDB Model Context Protocol Server Code Injection Flaw Enables Arbitrary Host Execution
AWS releases security bulletin 2026-097-AWS for CVE-2026-85654 in DynamoDB MCP server, where template injection enables arbitrary host command execution.
CST Editorial Desk20 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Security Advisory: Linux Kernel vhost vring Cache Corruption Flaw CVE-2026-74580 Patched via Livepatch
AWS publishes security advisory ALAS2023LIVEPATCH-2026-343 addressing a Linux kernel vhost vring metadata cache corruption vulnerability (CVE-2026-74580).
Daniel Okafor17 Sep 202613 min read