Do Son Attackers are bypassing AWS SES sandbox limits by pivoting to WorkMail. Rapid7 reveals how this abuse creates a blind spot for defenders.
AWS
Wiz reveals "CodeBreach": A regex typo in AWS CodeBuild could have let hackers hijack the AWS Console via the JS SDK. Issue is now patched.
NVIDIA folds DGX Cloud into its engineering arm to focus on internal R&D. Is the AI "arms dealer" quitting the cloud war to protect its chip monopoly?
Hackers are weaponizing AWS termination protection to lock defenders out while they mine crypto on hijacked ECS/EC2 resources using a malicious Docker image.
OpenAI eyes a $10B+ investment from Amazon, but the deal requires a major shift: switching from NVIDIA GPUs to Amazon’s custom Trainium AI chips.
AWS CEO Andy Jassy confirms Trainium AI chip revenue hit multi-billions. Over 1M units power 100K enterprises, driven by superior price-performance over GPUs.
AWS launched the Nova 2 model family (Lite, Pro, Omni) and Nova Act, an agent platform achieving 90% reliability in web-browsing tasks, with Nova Forge for deep customization.
AWS launched the Trainium3 chip in EC2 UltraServers, offering 4.4x performance for AI training and 40% better efficiency, supporting massive 1M-chip clusters.
AWS unveiled Route 53 Accelerated Recovery, guaranteeing a 60-minute RTO during DNS outages. The new feature is free for public hosted zones to boost cloud resilience.
AWS patched a High-severity flaw (CVE-2025-12779) in the WorkSpaces client for Linux. A local user can extract DCV authentication tokens to hijack another user’s virtual desktop session. Update to v2025.0.
OpenAI signed a $38B deal with AWS for cloud computing infrastructure, diversifying its resources after ending exclusivity with Microsoft. AWS gains a major AI client.
Amazon is reportedly planning to cut 30,000 corporate jobs across logistics, payments, and AWS as part of a major post-pandemic cost reduction effort.
AWS confirmed its 15-hour US-EAST-1 outage was caused by a DynamoDB DNS automation race condition that wiped out all service IP addresses.
A major AWS service outage in the US-EAST-1 region (Northern Virginia) crippled countless websites and applications, underscoring cloud dependency risks.
Multiple major online services, including YouTube, X/Twitter, and Steam, suffered simultaneous outages suspected to be caused by a temporary datacenter route failure primarily affecting the U.S. East Coast.
Rapid7 identified the Crimson Collective using TruffleHog to find leaked AWS IAM keys. The group achieves Admin access to steal data from RDS/S3 and extort victims.
AWS patched a Critical (CVSS 9.3) local flaw (CVE-2025-11462) in its Client VPN for macOS. A non-admin user can gain root privileges via a symlink manipulation attack.
A new report reveals how a compromised AWS key was used to bypass security controls in Amazon SES, enabling a 50,000-email-per-day phishing campaign.
Amazon's Q2 2025 earnings hit $167.7B as generative AI powers growth in AWS, Alexa+, and retail—Alexa+ to launch conversational ad monetization soon.
AWS Kiro, the popular free AI coding tool, is facing performance issues and now implements temporary usage limits and a waitlist due to unexpectedly high demand.
A critical unauthenticated SSRF vulnerability (CVE-2025-54122, CVSS 10.0) in Manager.io's accounting software allows bypassing network isolation and exfiltrating sensitive data from cloud environments.
Amazon's 2024 sustainability report reveals a 6% rise in carbon emissions, primarily driven by massive AI data center expansion, challenging its Climate Pledge goals.