Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
94 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_ce1e2df4c6cf3a749fRecent successful batchLast successful batch: Last attempt:
intelligence_src_cf55617878869ccba9Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Amazon GuardDuty Extended Threat Detection correlates weak GuardDuty signals into a single, critical-severity attack sequence finding when their composition crosses a threshold of credibility. On May 20, 2026, the service started attaching five new indicator types to those sequences: MALICIOUS_PACKAGE, MISCONFIGURATION, REACHABILITY, SENSITIVE_DATA, and VULNERABILITY. For more information, see Document history for Amazon GuardDuty and […]
First reported Oct 12, 2026 21:58 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
You’re building a data agent that lets business users ask questions about lakehouse data in natural language. You’ve already built governance policies that control who can access which datasets. The challenge is making the agent respect those rules without rebuilding them in your application code. When a user asks a question, the agent maps it […]
First reported Oct 06, 2026 16:07 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations that store, process, or transmit cardholder data on AWS. Organizations subject to […]
First reported Sep 14, 2026 17:46 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Your consumer identity and access management (CIAM) system is the foundation of your customer experience. It’s how users sign in, access services, and engage with your applications. As your business scales across geographies, ensuring authentication is always available becomes a core architectural requirement. However, building multi-Region authentication has traditionally required complex custom replication solutions that […]
First reported Sep 15, 2026 19:00 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
The AWS European Sovereign Cloud is a new, independent cloud for Europe, physically and logically separate from existing AWS Regions and operated within the European Union (EU). It provides the same services, features, and APIs as AWS commercial Regions, but runs as a distinct AWS partition (aws-eusc), with its own control plane, AWS Identity and […]
First reported Sep 16, 2026 21:20 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
On Saturday, October 24, 2026, we will conduct an exercise demonstrating that the AWS European Sovereign Cloud can operate without depending on any infrastructure outside of the European Union (EU). For several hours, the AWS European Sovereign Cloud will operate without a connection to the AWS Global Network backbone. The backbone is the private network […]
First reported Sep 28, 2026 17:05 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Vulnerability scanners produce findings faster than manual triage can process them. Your developers ship more code with more dependencies, and the volume of candidate findings grows with it. Many findings a scanner produces are unlikely to be exploited. The ones that matter need to reach an engineer fast, with enough evidence that they can act […]
First reported Oct 07, 2026 21:49 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Read all about the latest AWS security features, compliance updates, and hands-on resources in our monthly digest posts. You’ll find expert blog posts, new service capabilities, code samples, and workshops. AWS Security Blog posts August brought 20 AWS Security Blog posts organized across seven categories. Identity and access management led the month with five posts […]
First reported Sep 23, 2026 23:07 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
As AI models become more capable, they uncover more security vulnerabilities and identify increasingly sophisticated paths to exploit them, raising the bar for how quickly defenders must respond. Security teams now face more potential vulnerabilities than their existing processes were designed to handle — each requiring investigation, reproduction, and a repair that must be tested […]
First reported Oct 05, 2026 21:41 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
You want to set a cryptographic algorithm policy and stop non-compliant choices from being made in your Amazon Web Services (AWS) environment. This post shows you how. As you adopt post-quantum cryptography, one of the first decisions you face is which algorithms and parameter sets fit your business needs, balancing security against signature size, key […]
First reported Oct 12, 2026 20:13 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
European organizations can run AI workloads on Amazon Web Services (AWS) while keeping data within the European Union (EU) and meeting regulatory requirements. You can now run generative AI workloads on open weight models on Amazon Bedrock in the AWS European Sovereign Cloud. We’re excited to announce the general availability of the first open weight […]
First reported Sep 17, 2026 21:19 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
This post shows you how to configure an AI model to perform structured, evidence-based vulnerability triage with the consistency of a seasoned security analyst. You’ll learn the design decisions behind five configuration sections that enforce structural verification, evidence-based scoring, and infrastructure-aware prioritization across every analysis session. Our companion post—Building your AI vulnerability harness—covered the architecture; […]
First reported Oct 07, 2026 21:49 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Security teams investigating possible AI-related security events need guardrail intervention data alongside their existing security telemetry. When a guardrail identifies or blocks a prompt injection attempt or redacts sensitive data, that intervention carries additional investigative value comparable to a failed sign-in or a network intrusion alert. AWS Bedrock publishes this telemetry to AWS CloudWatch metrics […]
First reported Sep 21, 2026 15:33 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
If you’ve ever wondered whether your background qualifies you for a career in cybersecurity, you’re not alone — and you’re probably more prepared than you think. My name is Shannon Brazil, and I work in security communications at Amazon Web Services (AWS). I have been in the security space for over a decade, and my […]
First reported Oct 07, 2026 16:21 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
The principle of least privilege is straightforward to articulate but challenging to maintain at scale. When teams first deploy applications to AWS, they often grant broader permissions than strictly necessary; it’s faster to get things working, and the plan is always to tighten permissions later. But later rarely comes. Permissions accumulate, AWS Identity and Access […]
First reported Sep 15, 2026 15:53 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Security teams are starting to actively use AI for security work, including vulnerability triage, penetration testing, threat modeling, incident response, and code review. The promise is speed, but a security tool that moves fast and raises too many false alarms doesn’t save time. Engineers spend time on false alarms, on-call is noisier, and teams distrust […]
First reported Sep 09, 2026 19:09 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Software supply chain attacks have grown in both frequency and sophistication. Recent high-profile compromises of build systems and open source dependencies demonstrate that attackers increasingly target the trust mechanisms that verify software integrity. Those trust mechanisms rely on digital signature algorithms, and today many use traditional algorithms such as Rivest-Shamir-Adleman (RSA) and the Elliptic Curve […]
First reported Oct 12, 2026 20:12 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
The Australian Signals Directorate (ASD) has this month issued a clear call to action through its Multi-factor authentication: Switch it on campaign, urging businesses, organisations, and individuals to enable multi-factor authentication (MFA) across their online accounts. At AWS, we strongly support this message. As threat actors continue to target credentials through phishing, credential stuffing, and […]
First reported Sep 23, 2026 14:45 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
AWS Security Token Service (AWS STS) has simplified session token size limits, giving you more room for your session policies and session tags. STS has replaced the packed policy size and the overall session token size limits with a single token size limit of 4,096 bytes. STS now reports session token size in API responses, […]
First reported Sep 15, 2026 22:21 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
In cloud-centered environments, establishing trust between workloads is fundamental to securing machine-to-machine communication. Traditional approaches such as API keys, shared secrets, and static service account credentials weren’t designed for the scale and ephemeral nature of cloud workloads. This drives an organizational need to shift from long-term, static credentials to short-lived cryptographic workload identities. Organizations are […]
First reported Oct 06, 2026 18:52 UTCCatalog metadata updated Oct 13, 2026 03:29 UTCOpen evidence record
Portswigger's James Kettle's HTTP Terminator, pretty crazy report about how threat actors were abusing Claude, how Cloudflare enforces code quality at scale
First reported Sep 17, 2026 14:30 UTCCatalog metadata updated Oct 13, 2026 03:28 UTCOpen evidence record
Anthropic and Meta models hacked third parties during testing, #collab-ing with an agent in an IR notebook, deep dive post on Figma's AI-powered code scanning
First reported Aug 07, 2026 14:30 UTCCatalog metadata updated Oct 13, 2026 03:28 UTCOpen evidence record
Interesting paper, LLM-powered hardening of the PHP ecosystem, security implications of the new MCP spec
First reported Jul 02, 2026 19:24 UTCCatalog metadata updated Oct 13, 2026 03:28 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.