Amazon Web Services (AWS)

Security Notices
AWS Fixes SageMaker Studio Space Startup Command Injection
10/02/2026

Amazon Web Services (AWS) issued 2026-125-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
AWS Loom 1.7.0 Fixes Authentication and Outbound Request Flaws
10/02/2026

Amazon Web Services (AWS) issued 2026-124-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
AWS Powertools for Lambda Fixes Data-Masking Fail-Open
10/01/2026

Amazon Web Services (AWS) issued 2026-123-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
AWS Updates Amazon Ion Python for Recursion Denial of Service
10/01/2026

Amazon Web Services (AWS) issued 2026-122-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
AWS EFS CSI Driver 3.5.0 Fixes Mount Option Injection
10/01/2026

Amazon Web Services (AWS) issued 2026-120-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
Amazon Linux Publishes Thirty-Five Live Patches for CVE-2026-80521
09/30/2026

Amazon Linux maps one AF_UNIX fix to thirty-five kernel-specific live patches. Match the running kernel and confirm livepatch prerequisites and loaded status; installing every package is wrong, and livepatching does not eliminate native-kernel updates or planned reboots.

Read this guide
Security Notices
Amazon Linux 2023 Kernel Updates Address CVE-2026-80521
09/30/2026

Amazon Linux 2023 advisories map an AF_UNIX kernel fix to separate 6.1, 6.12 and 6.18 streams. Select the host's matching supported package and verify runtime state; the brief defect description does not establish remote code execution.

Read this guide
Security Notices
Amazon Linux Updates SSM Agent for Four Vulnerabilities
09/30/2026

Amazon Linux SSM Agent updates address bundled dependency flaws and authenticated port-forwarding SSRF that can expose instance-role credentials. Update the deployed agent and validate management workflows; the set does not imply unauthenticated Internet exposure for every flaw.

Read this guide
Security Notices
AWS Updates pgcollection to Address Type-Confusion Remote Code Execution
09/24/2026

Self-managed pgcollection 2.0.0-2.1.1 needs an update for type-confusion code execution. Inventory installed extensions and plan recovery checks; AWS's unaffected RDS/Aurora statement applies specifically to the pgcollection version named in its bulletin.

Read this guide
Security Notices
AWS Kiro IDE 1.0.242 Restricts Agentic Writes from Untrusted Workspaces
09/24/2026

Kiro IDE agentic work in an untrusted workspace could modify global configuration outside that workspace. Upgrade to 1.0.242 or later and separately review existing settings, preserving suspicious workspace and filesystem evidence before repair.

Read this guide