Tag: iam security
2 articles
AWS Neutralizes Compromised IAM Credentials with Managed Policy Updates
In a controlled test, AWS swiftly responded to a compromised access key by attaching a managed policy that quarantines the threat, all within 10 seconds of the key being publicly exposed on GitHub. By doing so, AWS effectively limited potential damage by denying access to certain high-risk actions.
LiteLLM Gateways Expose Cloud Credentials to Risk with Default Admin Key
Thousands of LiteLLM gateways are leaving cloud credentials vulnerable due to a shocking security flaw: nearly 300 online gateways accepted a default admin key, granting hackers unrestricted access to sensitive data and cloud accounts. This easily exploitable weakness puts countless organizations at risk of devastating breaches.