Infosec Brain Worms

Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!

Links:

• This collection of best practices for managing root users at scale in AWS is worth a read
• 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms.
• 1Health is this week's winner of the S3 Bucket Negligence Award
• Barracuda advises customers to rip the entire device out, throw it away, and replace it entirely. 
• S3 buckets being used in attacks on npm packages
• Issue with AWS Directory Service EnableRoleAccess
• Tool of the week: xeol is an end-of-life package scanner. 

What is AWS Morning Brief?

The latest in AWS news, sprinkled with snark. Posts about AWS come out over sixty times a day. We filter through it all to find the hidden gems, the community contributions--the stuff worth hearing about! Then we summarize it with snark and share it with you--minus the nonsense.