Hackers Exploit AWS IAM Eventual Consistency for Stealthy Persistence

First seen 10 Dec 2025, 06:46 UTC • Cybersecuritynews

•20

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Hackers are exploiting the eventual consistency of AWS IAM updates to maintain access to compromised accounts. When security teams delete credentials, the changes do not propagate immediately across the AWS infrastructure, allowing attackers to remain undetected. This vulnerability affects organizations relying on AWS for identity and access management.

How this analysis works

Continue Reading

Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine Campaign Malware Spread via Fake Polymarket Trading Bot Targets DeFi Developers Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks APT41 Exploits Cloud Services with New Zero-Detection ELF Backdoor Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices Drone Strikes Disrupt AWS Infrastructure, Trigger Cybersecurity Crisis for MSPs

Hackers Exploit AWS IAM Eventual Consistency for Stealthy Persistence

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading