Vulnerabilities
AWS Fixes RSA Padding Oracle in S3 Encryption Client for .NET
Amazon patches a vulnerability allowing remote users to decrypt S3 objects by forcing a downgrade to legacy PKCS#1 v1.5 padding.
Amazon S3
Everything Threat Times has reported about Amazon S3: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS Fixes Auth Bypass in QnABot Lambda Hook Sample Affecting Versions 7.0.0-7.4.5
An authorization bypass flaw in an optional Amazon Q Business Lambda hook sample allows authenticated users to access arbitrary S3 objects in affected AWS accounts.