Exploiting security permission flaws
The following are the most common vulnerabilities within AWS cloud services:
- Excessive public subnets – The majority of organizations utilize the default VPC (Virtual Private Cloud) feature that is built into AWS and make few changes when they utilize AWS services, taking the easy approach. However, this approach has been proven dangerous in many cases (an example would be botnet-based crypto-ransomware). Public subnets are accessible by anyone on the internet, potentially exposing something that shouldn’t normally be available.
- IAM (Identity and Access Management) issues in organizations that do not utilize two- or multi-factor authentication for high-privileged accounts and utilize a single account for almost everything, providing the same level of access to all new accounts, putting them at risk. There have been cases where employees’ accounts have been compromised through email phishing leading to massive...
