Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
AWS fixes security flaws that exposed AWS customer data

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png AWS fixes security flaws that exposed AWS customer dataPost Views: 112 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Amazon Web Services (AWS) has addressed an AWS Glue security issue that allowed attackers to access and alter data linked to other AWS customer accounts. AWS Glue is a serverless cloud data integration service that helps discover, prepare, and combine data for app development, machine learning, and analytics.

The flaw stemmed from an exploitable AWS Glue feature and an internal service API misconfiguration that allowed Orca Security security researchers to escalate privileges to gain access to all service resources in the region.

“During our research, we were able to identify a feature in AWS Glue that could be exploited to obtain credentials to a role within the AWS service’s own account, which provided us full access to the internal service API,” explained Yanir Tsarimi, a Cloud Security Researcher at Orca Security.

“In combination with an internal misconfiguration in the Glue internal service API, we were able to further escalate privileges within the account to the point where we had unrestricted access to all resources for the service in the region, including full administrative privileges.”
See Also: Complete Offensive Security and Ethical Hacking Course
The researchers added that their findings were uncovered using only Orca Security-owned AWS accounts and that they didn’t access information or data belonging to other AWS customers during their research.
https://www.bleepstatic.com/images/news/security/attack-flow.gif
While investigating the vulnerability, the researchers assumed roles trusted by the Glue service in other AWS customers’ accounts (every account with Glue access has at least one such role).

They were also able to query and alter AWS Glue service-related resources in an AWS region, including but not limited to metadata for Glue jobs, dev endpoints, workflows, crawlers, and triggers.

The AWS Glue service team reproduced and confirmed the flaw within hours after receiving Orca Security’s report and partially mitigated the issue globally by the following morning.
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Microsoft: New critical Windows HTTP vulnerability is wormable They deployed full mitigation for the Superglue vulnerability in just a few days, preventing potential attackers from accessing AWS Glue customers’ data.

Analysis of logs going back to the launch of the service have been conducted and we have conclusively determined that the only activity associated with this issue was between accounts owned by the researcher. No other customer’s accounts were impacted. All actions taken by AWS Glue in a customer’s account are logged in CloudTrail records controlled and viewable by customers. — AWS

AWS’ Security Team has also patched a second vulnerability found by Orca Security in the AWS CloudFormation service (dubbed BreakingFormation).

According to the researchers, this XXE (XML External Entity) flaw led to file and credential disclosure of internal AWS infrastructure services.

“Our research team believes, given the data found on the host (including credentials and dat[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

AWS fixes security flaws that exposed AWS customer data | Black Hat Ethical Hacking

Amazon Web Services (AWS) has addressed an AWS Glue security issue that allowed attackers to access and alter data linked to other AWS customer accounts.

15 viewsedited 10:21

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking AWS fixes security flaws that exposed AWS customer data https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png AWS fixes security flaws that exposed AWS customer dataPost Views: 112 https://www…

a involving internal endpoints), that an attacker could abuse this vulnerability to bypass tenant boundaries, giving them privileged access to any resource in AWS,” Orca Security’s Tzah Pahima added.

However, AWS VP Colm MacCárthaigh denied the security firm’s claims, saying that the BreakingFormation bug could have only been used to access host-level credentials and that AWS CloudFormation hosts don’t have access to resources in all AWS accounts.
See Also: Offensive Security Tool: Osmedeus O.k. here's my quick synopsis of this issue: @orcasec discovered and reported an issue that lead to SSRF on hosts and could fetch some local host-level creds and configuration. Great find! 1/n https://t.co/R2UsSrOdZ7

— Colm MacCárthaigh (@colmmacc) January 13, 2022
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/image-apple-releases-15-2-1-update-for-ios-and-ipados-to-fix-bugs-164203308032302-90x90.jpg Apple fixes doorLock bug that can disable iPhones and iPads1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/using-npm-create-javascript-icon-libraries-90x90.png Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-7-90x90.jpg Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Apple-iPhone-13-Pro-90x90.png iOS malware can fake iPhone shut downs to snoop on camera, microphone1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0358ad020c37-article-cache-poisoning-article-90x90.png Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/1200x0-90x90.jpg Apple iOS vulnerable to HomeKit ‘doorLock’ denial of service bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/exchange-90x90.png Microsoft releases emergency fix for Exchange – 2022 bug2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/maxresdefault-90x90.jpg Have I Been Pwned adds 441K accounts stolen by RedLine malware2 weeks ago
The post AWS fixes security flaws that exposed AWS customer data first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

15 viewsedited 10:21

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Why do I keep receiving "Bitcoin" e-mails?

So I invested some money into crypto and I started receiving e-mails from scam "Bitcoin investors", "metamask support", "trust wallet support" etc. How do they know that I use those? I don't think everyone gets these kind of email's so where does the sender of the email know from that I use these different services? Does anyone here care to explain how something like this works like?

submitted by /u/Humongous_Ego
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Why do I keep receiving "Bitcoin" e-mails?

So I invested some money into crypto and I started receiving e-mails from scam "Bitcoin investors", "metamask support", "trust wallet support"...

9 viewsedited 11:01

Hacking Articles Tips Tricks Videos Tutorials

7 views11:03

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
What is malware analysis?

https://cdn-images-1.medium.com/max/742/1*BXZKK51ZUDa_ZinUEKg-CA.png
It sounds great right? But what is malware, how the bad guys use it and what is so important today?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is malware analysis?

It sounds great right? But what is malware, how the bad guys use it and what is so important today? On my first blog I’ll explain this in a…

6 viewsedited 11:03