Infosec Brain Worms
02:54 Share

Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!

Links:

• This collection of best practices) for managing root users at scale in AWS is worth a read
• 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms).
• 1Health is this week's winner of the S3 Bucket Negligence Award)
• Barracuda advises customers to rip the entire device out), throw it away, and replace it entirely. 
• S3 buckets being used in attacks on npm packages)
• Issue with AWS Directory Service EnableRoleAccess)
• Tool of the week: xeol) is an end-of-life package scanner.