Amazon CloudTrail is a technology platform tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed December 16, 2025; most recent activity June 29, 2026.
In June 2026, threat actors targeted Amazon EKS clusters by exploiting Kubernetes credentials or IAM roles to modify workloads and hijack compute resources. Attackers gained initial access through application-layer…
The articles detail a two-part incident response playbook tailored for satellite operations using AWS. Part one focuses on detection and forensic readiness, emphasizing the unique challenges of satellite IR, such as…
A sophisticated cryptocurrency mining campaign targeting AWS customers began on November 2, 2025, using compromised AWS Identity and Access Management (IAM) credentials. The attackers exploited Amazon Elastic Container…