The Hacker News
A now-patched vulnerability in AWS Managed Workflows for Apache Airflow (MWAA) could have allowed attackers to hijack sessions & execute code remotely
DarkReading
A bug exposed users of an AWS workflow management service to cookie tossing. Behind the scenes lies an even deeper issue across all of the top cloud services.
SecurityWeek
AWS patches vulnerability that could have been used to hijack Managed Workflows Apache Airflow (MWAA) sessions via FlowFixation attack.
SC Magazine
Several AWS, Azure and Google Cloud domains were found to lack a key guardrail against XSS.
SC Magazine
Several AWS, Azure and Google Cloud domains were found to lack a key guardrail against XSS.
Security Affairs
Threat actors launched a cyberattack on an Irish water utility causing the interruption of the power supply for two days.
SC Magazine
Default passwords enabled the Iranian-linked APT to compromise Israeli-made control systems at water and wastewater facilities, a public aquarium and a brewery.
CSO
Federal and state investigations are underway for the recent pro-Iran hack into a Pennsylvania-based water utility targeting Israel-made equipment.
CyberNews
A CISA cybersecurity warning says the Iranian hacker group targeting water and energy facilities in Israel, attacked two townships in Pennsylvania over the weekend.
Security Affairs
Threat actors breached the Municipal Water Authority of Aliquippa in Pennsylvania and took control of a booster station