son of a bitch on Nostr: ⚠️ Cybersecurity researchers have uncovered the whoAMI attack, which allows ...
⚠️ Cybersecurity researchers have uncovered the whoAMI attack, which allows hackers to gain access to AWS EC2 instances through a name confusion vulnerability in AMIs.
By publishing backdoored AMIs with specific names, attackers can exploit misconfigured API searches to trick systems into using their malicious AMIs.
Even simple misconfigurations in AMI searches can lead to code execution vulnerabilities, affecting both public and private AWS users.
Learn more:
https://thehackernews.com/2025/02/new-whoami-attack-exploits-aws-ami-name.html Published at
2025-02-14 20:09:54 GMTEvent JSON
{
"id": "154c675b465004a0adc6286f52a8b57656b6d047901b69994d4ea121184b7a14",
"pubkey": "5a54abdc84a5fa3d701aca1effa36cd1b29c0e3b82b81ed4d9380d923c58d510",
"created_at": 1739563794,
"kind": 1,
"tags": [
[
"r",
"https://image.nostr.build/35c227662c81dbb1883e3e1f51f00dbc9cb1f898072dc569b287ba2e75e1dd13.jpg"
],
[
"r",
"https://thehackernews.com/2025/02/new-whoami-attack-exploits-aws-ami-name.html"
],
[
"imeta",
"url https://image.nostr.build/35c227662c81dbb1883e3e1f51f00dbc9cb1f898072dc569b287ba2e75e1dd13.jpg",
"x 3c2fba3364a9e9d5dc4c4377726c69c993cd31b7dcce0171ce6af2b96b512ce6",
"size 9259",
"m image/jpeg",
"dim 728x376",
"blurhash igPr?q-S_MJBkCs.aKt7M|?GR*NbxZRPafkCWVs:.RW=IBs9V@WBozbHoeI:s.xDNbtRjsjtofRjxuWXRjn%bIofaxWBoL",
"ox 3c2fba3364a9e9d5dc4c4377726c69c993cd31b7dcce0171ce6af2b96b512ce6",
"alt Hacker news"
]
],
"content": "https://image.nostr.build/35c227662c81dbb1883e3e1f51f00dbc9cb1f898072dc569b287ba2e75e1dd13.jpg ⚠️ Cybersecurity researchers have uncovered the whoAMI attack, which allows hackers to gain access to AWS EC2 instances through a name confusion vulnerability in AMIs.\n\nBy publishing backdoored AMIs with specific names, attackers can exploit misconfigured API searches to trick systems into using their malicious AMIs.\n\nEven simple misconfigurations in AMI searches can lead to code execution vulnerabilities, affecting both public and private AWS users.\n\nLearn more: https://thehackernews.com/2025/02/new-whoami-attack-exploits-aws-ami-name.html",
"sig": "1978bd532176d5d31ef8434524a77b69782b760af7467e9ee991ab52840d8009cada97330239c5e63b5513b806d591418d4b153b0a59a5fd9345605ce7d21688"
}