Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond

Bluekit phishing platform expands with browser-in-the-middle technique and AI-assisted attacks

Bluekit, a phishing-as-a-service platform, has expanded with nearly 70 new hostnames and adopted a browser-in-the-middle technique using rrw

Shadow AI in AWS: Detecting and Governing Unauthorized AI Usage in Enterprise Environments

This article examines the emerging challenge of "Shadow AI" in AWS environments — the unauthorized or ungoverned use of generative AI tools

Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies

Exploring Leaked AWS Access Keys and Attacker Exploitation: Insights from a Blog Series

The final part of a blog series explores leaked AWS Access Keys, how attackers exploit them, and measures organizations can take to protect

Blue41 identifies AI prompt injection vulnerability in Bunq's banking assistant

Blue41, a security firm, helped Bunq (Europe's second-largest digital bank) secure its AI assistant against spearphishing risks by identifyi

Trivy Vulnerability Scanner Compromised in Supply Chain Attack That Harvested CI/CD Credentials

The article details a sophisticated supply chain attack on Aqua Security's Trivy vulnerability scanner in March 2026, where attackers inject