Tag: Thought Leadership
-
Part 2 – Cybersecurity journeys: What even is this job?
, I shared how three people found their way into security from a warehouse floor, a marketing desk, and a teenager’s bedroom. This week …
-
Part 1 – Cybersecurity journeys: I didn’t plan this
. I have been in the security space for over a decade, and my own journey into it wasn’t exactly a straight line. I started in Statistics …
-
The state of AI for security: Measuring what matters most for building trust
Security teams are starting to actively use AI for security work, including vulnerability triage, penetration testing, threat modeling, …
-
Amazon identifies North Korean hacker group behind open-source supply chain attacks
Amazon is sharing new findings about how a threat actor linked to the Democratic People’s Republic of Korea (DPRK) is targeting open …
-
The CISO’s guide to post-quantum mandates and migrations
There are five key takeaways to the information presented in this post: Start at the …
-
AWS Security Hub Extended: Why enterprise security products should sell themselves
Our largest security services customers started the same way every customer does – with a click. They enabled Amazon GuardDuty, Amazon …
-
Four security principles for agentic AI systems
Agentic AI represents a qualitative shift in how software operates. Traditional software executes deterministic …
-
Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls
Amazon threat intelligence has identified an active Interlock ransomware campaign exploiting CVE-2026-20131, a critical vulnerability in …
-
AI-augmented threat actor accesses FortiGate devices at scale
Commercial AI services are enabling even unsophisticated threat actors to conduct cyberattacks at scale—a trend Amazon Threat …
-
Amazon Threat Intelligence identifies Russian cyber threat group targeting Western critical infrastructure
As we conclude 2025, Amazon Threat Intelligence is sharing insights about a years-long Russian state-sponsored campaign that represents a …
-
China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)
Within hours of the public disclosure of CVE-2025-55182 (React2Shell) on December 3, 2025, Amazon threat intelligence teams observed active …
-
Introducing guidelines for network scanning
is introducing guidelines for network scanning of customer workloads. By following these guidelines, conforming scanners will collect more …
●●●