https://blog.itsdavidg.co/categories/aws-security-audit/ Recent content in AWS Security Audit on David Gomez - Technology & Business Insights Hugo en-us Fri, 11 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-11-aws-security-audit-cisco-fmc-flaws-exploited-to-steal-credentials-and-deploy/ Fri, 11 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-11-aws-security-audit-cisco-fmc-flaws-exploited-to-steal-credentials-and-deploy/ Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities. The attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unaut https://blog.itsdavidg.co/posts/2026-09-10-aws-security-audit-researcher-drops-new-microsoft-defender-poc-showing-shield/ Thu, 10 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-10-aws-security-audit-researcher-drops-new-microsoft-defender-poc-showing-shield/ The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed to be a patch bypass for CVE-2026-69414 (CVSS score: 7.8), also called ShieldBreak, which the researcher reported last month. "Microsoft has failed to properly patch Shield https://blog.itsdavidg.co/posts/2026-09-09-aws-security-audit-webinar-learn-how-to-answer-are-we-exposed-faster-after-a/ Wed, 09 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-09-aws-security-audit-webinar-learn-how-to-answer-are-we-exposed-faster-after-a/ A major vulnerability is disclosed. The alert lands immediately. Then comes the harder question: Are we actually exposed? For many security teams, answering that means jumping between vulnerability scanners, endpoint tools, cloud inventories, SBOMs, repositories, and application data to build enough context to act. As AI accelerates vulnerability discovery a https://blog.itsdavidg.co/posts/2026-09-08-aws-security-audit-adobe-patches-magento-zero-day-exploited-to-deploy-rust-ba/ Tue, 08 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-08-aws-security-audit-adobe-patches-magento-zero-day-exploited-to-deploy-rust-ba/ Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026. " https://blog.itsdavidg.co/posts/2026-09-07-aws-security-audit-rogue-screenconnect-clients-spread-four-stage-vbscript-cha/ Mon, 07 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-07-aws-security-audit-rogue-screenconnect-clients-spread-four-stage-vbscript-cha/ Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diverse initial access methods, namely a Quick Assist tech-support scam, a phishing-de https://blog.itsdavidg.co/posts/2026-09-06-aws-security-audit-attackers-breached-jetbrains-cadence-via-unpatched-teamcit/ Sun, 06 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-06-aws-security-audit-attackers-breached-jetbrains-cadence-via-unpatched-teamcit/ JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their https://blog.itsdavidg.co/posts/2026-09-05-aws-security-audit-critical-cisco-nexus-9000-flaw-lets-unauthenticated-remote/ Sat, 05 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-05-aws-security-audit-critical-cisco-nexus-9000-flaw-lets-unauthenticated-remote/ Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute code as root, alongside an IOS XR hardening release bundling 7 umbrella CVEs, 2 of which are rated 9.8, with no workaround for any IOS XR version. The Nexus vulnerability, tracked as https://blog.itsdavidg.co/posts/2026-09-04-aws-security-audit-google-releases-chrome-update-to-patch-actively-exploited/ Fri, 04 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-04-aws-security-audit-google-releases-chrome-update-to-patch-actively-exploited/ Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 (CVSS score: 8.8), has been described as a type confusion bug in V8, Chrome's JavaScript and WebAssembly engine. "Type confusion in V8 in Google Chrome prior to https://blog.itsdavidg.co/posts/2026-09-03-aws-security-audit-cisa-adds-seven-exploited-flaws-as-attackers-deploy-revers/ Thu, 03 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-03-aws-security-audit-cisa-adds-seven-exploited-flaws-as-attackers-deploy-revers/ The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 (CVSS score: 10.0) - A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that cou https://blog.itsdavidg.co/posts/2026-09-02-aws-security-audit-attackers-exploit-two-sonicwall-sma-1000-zero-days-that-ma/ Wed, 02 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-02-aws-security-audit-attackers-exploit-two-sonicwall-sma-1000-zero-days-that-ma/ SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below - CVE-2026-83548 (CVSS score: 10.0) - A pre-authentication SSRF vulnera https://blog.itsdavidg.co/posts/2026-09-01-aws-security-audit-amazon-redshift-now-supports-aws-iam-identity-center-authe/ Tue, 01 Sep 2026 12:00:00 +0000 https://blog.itsdavidg.co/posts/2026-09-01-aws-security-audit-amazon-redshift-now-supports-aws-iam-identity-center-authe/ Amazon Redshift now supports AWS IAM Identity Center authentication for provisioned clusters and serverless workgroups configured with enhanced VPC routing (EVR). You can access Amazon Redshift with single sign-on with your corporate credentials, and the traffic traverses Amazon Virtual Private Cloud (Amazon VPC) and stays on the AWS network. This is valuabl