Sunday, 1 November 2026Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Topic

AWS: news, advisories and analysis

35 articlesUpdated 1 Nov 2026

CyberSecureToday covers AWS across 35 articles published between 16 Sep 2026 and 1 Nov 2026. The coverage includes 33 vulnerability advisories and 2 analysis or guidance pieces. 31 advisories are rated critical or high severity.

Stories on AWS most often intersect with Cloud Security, IAM and Amazon Web Services, with Technology, Cloud & SaaS the most affected sector. The most recent story, “AWS Enterprise Services Vulnerability Disclosed”, was published 1 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
AWS Enterprise Services Vulnerability Disclosed
CVE-2026-95699 in AWS Enterprise Services (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 9 and later.
Aisha Noor1 Nov 202610 min read
ThreatsCloud & SaaSCritical
AWS Enterprise Services OS Command Injection Flaw Disclosed
CVE-2026-79916 in AWS Enterprise Services (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.10.5-lts and
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
AWS Enterprise Services Server-Side Request Forgery Flaw Disclosed
CVE-2026-12944 in AWS Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.10.0
Aisha Noor23 Oct 202610 min read
ThreatsCloud & SaaSHigh
AWS Amplify CLI Prototype Pollution Flaw in Velocity Template Engine Enabled Local Code Execution
A prototype chain traversal flaw in AWS Amplify's velocity template engine allowed attackers with malicious VTL files to execute arbitrary local commands.
Aisha Noor18 Oct 202614 min read
NewsCloud & SaaSCritical
AWS IAM Identity Center SAML Canonicalization Flaw Enables Cross-Account Administrative Role Assumption (CVE-2026-78520)
AWS patches a critical vulnerability in IAM Identity Center (CVE-2026-78520) allowing manipulated SAML XML comments to bypass role assignment boundaries.
CST Editorial Desk13 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS S3 Express One Zone Flaw Allowed Session Token Reuse Across Enclaves
AWS resolves security flaw CVE-2026-75210 in S3 Express One Zone storage class, addressing a session token reuse bug across high-performance compute enclaves.
CST Editorial Desk12 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS Identity and Access Management SCIM Endpoint Authentication Bypass Exposes Cloud Federation Roles
A security vulnerability in AWS IAM Identity Center's SCIM protocol implementation could allow token bypass during automated user and group provisioning.
CST Editorial Desk10 Oct 20268 min read
ThreatsCloud & SaaSHigh
AWS EKS Pod Identity Agent Flaw Lets Compromised Pods Replay IAM Credentials
AWS Security Bulletins disclose a privilege escalation vulnerability in the Amazon EKS Pod Identity Agent allowing compromised pods to replay IAM credentials.
CST Editorial Desk8 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS IAM Identity Center Flaw Enables SCIM Bearer Token Bypass Across Enterprise Cloud Tenants
AWS resolves high-severity vulnerability CVE-2026-46210 in IAM Identity Center where cached SCIM bearer tokens allowed cross-directory role synchronization bypass.
CST Editorial Desk7 Oct 20268 min read
NewsCloud & SaaS
AWS Powertools for Python Lambda Utility Fail-Open Defect Leaks Unmasked Sensitive Data to Logs (CVE-2026-104002)
AWS resolved a fail-open defect in Python Lambda Powertools data masking (CVE-2026-104002) that emitted unmasked sensitive records to logs during masking errors.
Aisha Noor5 Oct 20268 min read
NewsCloud & SaaS
AWS Security Bulletin Details Argument Injection Flaw in Model Context Protocol Security Agent (CVE-2026-97662)
AWS Security Bulletin 2026-121-AWS addresses an argument injection defect in security-agent-mcp-server diff scanning that permits arbitrary file modification.
Aisha Noor5 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS Loom AI Agent Platform Flaw Gave Unauthenticated Attackers Super-Admin Control
CVE-2026-103956 in AWS Labs Loom (CVSS 10.0) let any network client act as super-admin on IdP-less deployments. Two SSRF flaws leaked tokens. Upgrade to 1.7.0+.
Aisha Noor4 Oct 20267 min read
ThreatsCloud & SaaSHigh
AWS SDK for C++ Base64 Decoder Memory Flaws Trigger Process Crashes CVE-2026-19642
An out-of-bounds write defect in the AWS SDK for C++ Base64 decoder allows crafted inputs to corrupt heap memory and terminate cloud client processes.
Aisha Noor27 Sep 20268 min read
ThreatsCloud & SaaSHigh
AWS Athena ClickHouse Connector Flaw Enables Cross-Account Secrets Manager Extraction
AWS Security Bulletin 2026-084-AWS warns of authorization flaw CVE-2026-75910 in Athena ClickHouse connector allowing arbitrary Secrets Manager data leakage.
Daniel Okafor26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Transform MCP Server Flaw Enables Arbitrary File Overwrites in Agent Workflows
AWS Security Bulletin 2026-075-AWS discloses critical path traversal flaw CVE-2026-18953 in aws-transform-mcp-server enabling unauthenticated arbitrary file overwrites.
Daniel Okafor26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS pgcollection Type Confusion Flaw Enables Remote Code Execution in PostgreSQL
AWS Security Bulletin 2026-118-AWS warns of a critical type confusion flaw CVE-2026-96883 in open-source pgcollection enabling RCE in PostgreSQL database hosts.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda
AWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS HealthLake MCP Server SSRF Flaw Exposes IAM Credentials and Healthcare Data
AWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.
Priya Raman26 Sep 202617 min read
ThreatsCloud & SaaSHigh
Amazon ECS Container Agent Flaw Enables Task Boundary Breakout and IAM Role Credential Hijacking
AWS resolves a container boundary escape flaw in Amazon ECS Container Agent that allowed unprivileged containers to intercept task metadata and assume host IAM roles.
Aisha Noor25 Sep 202617 min read
ThreatsCloud & SaaSHigh
Amazon Ion-C Library Recursion Flaw Triggers Cloud Service Stack Exhaustion Crashes CVE-2026-84851
AWS publishes Bulletin 2026-094-AWS for high-severity flaw CVE-2026-84851 in Amazon Ion-C library, allowing attackers to exhaust stack memory and crash services.
CST Editorial Desk24 Sep 202615 min read
ThreatsCloud & SaaSHigh
Amazon OpenSearch SQL Plugin Cursor Deserialization Flaw Enables Remote Code Execution CVE-2026-83497
AWS and OpenSearch release bulletin 2026-092-AWS for high-severity flaw CVE-2026-83497 in the SQL plugin allowing authenticated users to execute code via cursors.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSCritical
Google Cloud Patches Critical GKE Multi-Cloud Flaw Enabling Cross-Project Cluster Hijack and Service Account Impersonation
Google Cloud remediates critical GCP-2026-058 flaw in GKE Multi-Cloud APIs where missing project checks enabled unauthorized cluster registration and IAM impersonation.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSHigh
Strands Agents Tools HTTP Request Authorization Flaw Enables Indirect Prompt Injection Credential Theft CVE-2026-18394
AWS resolves high-severity vulnerability CVE-2026-18394 in Strands Agents Tools, where indirect prompt injection forces AI agents to exfiltrate bearer credentials via malicious proxy parameters.
CST Editorial Desk22 Sep 202615 min read
ThreatsCloud & SaaSHigh
AWS SDK for Go v2 Event Stream Flaw Triggers Remote Denial-of-Service Panic
AWS patches medium-severity flaw CVE-2026-89090 in AWS SDK for Go v2, where malformed event stream response frames trigger unrecovered runtime panics and service crashes.
CST Editorial Desk22 Sep 202614 min read