Mandiant Founder Kevin Mandia Joins Amazon Board
Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board. The post Mandiant Founder Kevin Mandia Joins Amazon Board appeared first on SecurityWeek. more…Microsoft and Amazon devote billions of dollars to thousands of FDEs
Systems integrators (SIs) have been integral to IT projects for decades, providing consulting services and helping enterprises build and launch technology tools. Now, as organizations move to deploy agentic AI, top large language model (LLM) providers are looking to get in on that action. A proliferation of Forward Deployed Engineer (FDE) services embeds AI experts […] more…EU: Microsoft, Amazon cloud services could be classified as gatekeepers
Following a seven-month investigation, the European Commission has reached a preliminary decision that Amazon’s and Microsoft’s cloud platforms — AWS and Azure, respectively — should be classified as “gatekeepers” under the EU’s Digital Markets Act (DMA), Reuters reports. The DMA, also known as the Digital Markets Regulation, aims to limit the market power of dominant […] more…Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact. The post Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories appeared first on SecurityWeek. more…Amazon is aiming for a comeback in the smartphone market
Amazon plans to release a new smartphone, according to Reuters; the so-called “Transformer” project is being developed in-house and will focus on AI, personalization, and integration with Alexa. The idea is for the phone to serve as a central hub for a user’s daily life — from shopping and streaming to voice-controlled services — and […] more…Iranian Strikes on Amazon Data Centers Highlight Industry’s Vulnerability to Physical Disasters
Two AWS data centers in the United Arab Emirates were “directly struck” and another facility in Bahrain was also damaged after a drone landed nearby. The post Iranian Strikes on Amazon Data Centers Highlight Industry’s Vulnerability to Physical Disasters appeared first on SecurityWeek. more…Amazon Scraps Partnership With Surveillance Company After Super Bowl Ad Backlash
Amazon’s smart doorbell maker Ring has terminated a partnership with police surveillance tech company Flock Safety. The post Amazon Scraps Partnership With Surveillance Company After Super Bowl Ad Backlash appeared first on SecurityWeek. more…Amazon Go? It’s gone. And this is why it went.
For years, Amazon Go stores stood at the pinnacle of retail store technology, showcasing a massive number of high-resolution digital cameras in each store that could visually track every customer and how that shopper interacted with every product. The stores showcased Amazon’s technological superiority and brought an eerily human- and friction-free element to convenience store […] more…Amazon confirms 16,000 job cuts, including to AWS
Amazon is cutting about 16,000 jobs across the company, SVP of People Experience and Technology Beth Galetti wrote in an email to employees Wednesday. The cuts were widely expected — and although Galetti’s email did not mention Amazon Web Services, the cuts came as no surprise to AWS staff, some of whom were prematurely invited […] more…Amazon layoffs expected to disproportionately hit AWS and tech talent
As the market slows down, AWS and other Amazon units are preparing for another round of layoffs, which is expected to overwhelmingly impact tech talent. “Amazon is planning a second round of job cuts next week as part of its broader goal of trimming some 30,000 corporate workers,” Reuters reported. “The company in October cut […] more…North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers
Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers. The post North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers appeared first on SecurityWeek. more…Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks
After years of exploiting zero-day and n-day vulnerabilities, Russian state-sponsored threat actors are shifting to misconfigured devices. The post Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks appeared first on SecurityWeek. more…Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes
Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks. The post Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes appeared first on SecurityWeek. more…In Other News: Deepwatch Layoffs, macOS Vulnerability, Amazon AI Bug Bounty
Other noteworthy stories that might have slipped under the radar: EchoGram attack undermines AI guardrails, Asahi brewer still crippled after ransomware attack, Sora 2 system prompt uncovered. The post In Other News: Deepwatch Layoffs, macOS Vulnerability, Amazon AI Bug Bounty appeared first on SecurityWeek. more…Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign
A financially motivated threat actor automated the package publishing process in a coordinated tea.xyz token farming campaign. The post Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign appeared first on SecurityWeek. more…Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon
Amazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days. The post Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon appeared first on SecurityWeek. more…More information
- Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack
- Amazon data breach rumours spread as passwords are reset on some accounts
- Gartner: worldwide semiconductor revenue totaled $793 billion in 2025
- Blackhole, Supreme No More
- Lookout Expands Mobile Security Capabilities With Acquisition of Bluebox Security
- WordPress Security Presentation (in Portuguese)
- Critical GoCD Authentication Flaw Exposes Software Supply Chain
- Hackers Exploit WinRAR Vulnerability to Deliver Malware
- Sockbot Ensnares Android Devices into Botnet
- Microsoft scraps planned email limits for Exchange Online