InfoSecBulletin Cybersecurity for mankind

Security researchers disclosed a cirtical flaw in Amazon Elastic Container Service (ECS) that enables harmful containers to steal AWS credentials from other tasks on the same EC2 instance. The attack, dubbed “ECScape,” exploits an undocumented internal protocol to impersonate the ECS agent and harvest privileged credentials without requiring container breakout. …

Let’s look at 7 tools for automating patch deployment. Each tool offers unique features for various environments, from small DevOps teams to large enterprises. Attune by AttuneOps (Windows and Mac: Free & Enterprise) Best for: DevSecOps teams and infrastructure-as-code workflows Attune is purpose-built for automating complex server administration tasks, with …

Germany’s top court ruled on Thursday that police can secretly install spy software on phones and computers only for serious crimes. Key Points: German high court has limited the use of police spy software to serious criminal investigations. The court called the use of spyware a “serious interference” with privacy …