Topic

AWS IAM: news, advisories and analysis

3 articlesUpdated 14 Oct 2026

CyberSecureToday covers AWS IAM across 3 articles published between 15 Sep 2026 and 14 Oct 2026. The coverage includes 2 vulnerability advisories and 1 analysis or guidance piece. 2 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on AWS IAM most often intersect with Cloud Security, Amazon Web Services and IAM Identity Center, with Technology, Cloud & SaaS the most affected sector. The most recent story, “AWS IAM Identity Center Flaw Left Revoked Session Tokens Active”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
AWS IAM Identity Center Flaw Left Revoked Session Tokens Active
AWS resolves an access control flaw in IAM Identity Center and AWS CLI session handling (CVE-2026-82856) where revoked STS tokens remained temporarily active.
CST Editorial Desk14 Oct 20268 min read
InsightsCloud & SaaS
Cloud IAM Role Pivoting & Cross-Account Data Exfiltration: Multi-Cloud DFIR Forensics
Digital forensics analysis dissects how threat actors leverage leaked cloud credentials and cross-account IAM role assumptions to exfiltrate enterprise storage.
Mei-Lin Chen16 Sep 202612 min read
ThreatsCloud & SaaSCritical
MLflow Open-Source AI Platform SSRF Flaw Weaponized to Exfiltrate Cloud Credentials
CISA issues urgent warning on CVE-2026-64849, a critical SSRF defect in open-source MLflow model registries allowing attackers to steal cloud IAM metadata and poison AI pipelines.
Priya Raman15 Sep 20268 min read

Latest coverage

AWS IAM Identity Center Flaw Left Revoked Session Tokens Active

Cloud IAM Role Pivoting & Cross-Account Data Exfiltration: Multi-Cloud DFIR Forensics

MLflow Open-Source AI Platform SSRF Flaw Weaponized to Exfiltrate Cloud Credentials