Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!

Links:

  • This collection of best practices for managing root users at scale in AWS is worth a read
  • 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms.
  • 1Health is this week's winner of the S3 Bucket Negligence Award
  • Barracuda advises customers to rip the entire device out, throw it away, and replace it entirely.
  • S3 buckets being used in attacks on npm packages
  • Issue with AWS Directory Service EnableRoleAccess
  • Tool of the week: xeol is an end-of-life package scanner.