Nathaniel Quist News Today

Kubernetes-focused attacks are on the rise. Here is an overview of the current threats and best practices for securing your clusters.

In the active Elektra-Leak campaign, attackers hunt for Amazon IAM credentials within public GitHub repositories before using them for cryptomining.

Hackers were quick to grab AWS keys exposed on GitHub

Cyber adversaries are scanning public GitHub repositories in real-time, evading Amazon quarantine controls, and harvesting AWS keys.

The Automated Libra group is deploying all components of its campaign in an automated manner via containers, stealing free trial resources for cryptomining, but the threat could get larger.