THEMETASEC

Cybersecurity News, Aggregated

AWS Security Agent (now part of AWS Continuum) exploited 33 of 37 new real-world CVEs

AWS Security Blog · 1 hour ago Vuln

We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an unauthenticated or low-privilege position (an endpoint URL and a one-line hint, no […]

Read full story at AWS Security Blog →