You dont have javascript enabled! Please enable it!
  • Tech News
    African venture capital firms with funds in SVB weigh maintaining the relationship

    African venture capital firms with funds in SVB weigh maintaining the relationship

    Silvergate collapse: African fintechs search for new partners as some banking services pause

    Silvergate collapse: African fintechs search for new partners as some banking services pause

    3 ways to check your JAMB result using phone 2023

    3 ways to check your JAMB result using phone 2023

    How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget

    How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget

  • Reviews
    TechEngage®

    An ambitious phone with Wild Camera & tricks

    TechEngage®

    Google Pixel 3 Review: Consistently Unbeatable Camera Lord

    TechEngage®

    Pocophone F1 review: “Flagship Killer” killer?

    Slim, Slick & Economically Premium

    Slim, Slick & Economically Premium

    TechEngage®

    NVIDIA’s Quadro RTX 4000 GPU to be a $900 graphics beast

    TechEngage®

    Xiaomi Mi 8 Pro review; Should we still go for Mi 8?

  • Noteworthy
    TechEngage®

    Russia to briefly “turn off” country’s Internet entry. But why?

    TechEngage®

    Sprint announces first solid plans to unveil 5G infrastructure at MWC19

    Drunk shopping could be a $45 billion industry

    Drunk shopping could be a $45 billion industry

    TechEngage®

    The advantages and benefits of electronic signature

    TechEngage®

    Father of “cut, copy, and paste” Larry Tesler, dies at 74

    TechEngage®

    How the use of modern technology is messing up our sleep

  • Science
    • All
    • Energy
    • Environment
    • Health
    • Space
    TechEngage®

    Asthma and technological innovations for treating it

    Virtual Healthcare; A revolution in medical technology

    Virtual Healthcare; A revolution in medical technology

    Revolutionizing Healthcare Management; Virtual Nurse

    Revolutionizing Healthcare Administration; Virtual Nurse

    TechEngage®

    Biotechnology 2018 trends that are a complete knockout

  • Opinions
    TechEngage®

    Fundamentals of Wealth Creation for Better Outcomes

    TechEngage®

    Change; The only Constant in this World

    TechEngage®

    Proactive & Reactive being two extremes of different worlds

    TechEngage®

    Walmart suffered cases of gender discrimination

    TechEngage®

    How Digital Education features; its Pros and Cons

    TechEngage®

    Impact of Violent Video Games on Youth

  • Applications
    TechEngage®

    Google Play Pass will give access to paid apps

    TechEngage®

    Quizlet reaches 50 Million Users milestone

    TechEngage®

    Eradicate Gender Inequality through Crowd mapping!

    TechEngage®

    How mobile phone apps can help pregnant women

    TechEngage®

    Apple News app will be broadcasting live election results

    TechEngage®

    TikTok becomes the most downloaded app on the App Store

  • Blockchain
    TechEngage®

    Common mistakes new crypto investors make

    TechEngage®

    Microsoft launches Azure Blockchain Dev Kit

    TechEngage®

    The mystery behind Twitter Bitcoin scams has been solved

    TechEngage®

    Make-A-Wish website hit with the cryptojacking plight

    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

  • Applications
    TechEngage®

    Google Play Pass will give access to paid apps

    TechEngage®

    Quizlet reaches 50 Million Users milestone

    TechEngage®

    Eradicate Gender Inequality through Crowd mapping!

    TechEngage®

    How mobile phone apps can help pregnant women

  • Culture
    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

  • Deals
    TechEngage®

    New York Times joins with Scribd to offer an economical subscription bundle

    TechEngage®

    Motorola puts up some scary good deals for Halloween

    TechEngage®

    Lavender version of Samsung Galaxy Note 9 will be $140 off

    TechEngage®

    Samsung trade up to Galaxy A7 provide; Holiday offers spree just got better

  • Events
    TechEngage®

    Nokia to launch new smartphones on April 8th

    TechEngage®

    What to expect from Samsung Galaxy Unpacked event

    TechEngage®

    What to expect from the OnePlus 9 launch event

    TechEngage®

    What to expect from Apple’s WWDC21 event

  • How-to
    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

  • Roundups
    TechEngage®

    Best Android Launchers of 2023

    10 Most Anticipated Upcoming Smartphones of 2023

    10 Most Anticipated Upcoming Smartphones of 2023

    TechEngage®

    Best Family Board Games to Buy on Amazon for 2023

    TechEngage®

    Top 10 Best Virtual Assistant Apps 2023

  • Startups
    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    Techabout Banner

    TechAbout: A venture that adds life to your dreams

    Avatar Of Nur

    These 5 Startups Will Change the Future of Health-tech

Friday, March 17, 2023
Tech News, Magazine & Review WordPress Theme 2017
No Result
View All Result
  • Tech News
    African venture capital firms with funds in SVB weigh maintaining the relationship

    African venture capital firms with funds in SVB weigh maintaining the relationship

    Silvergate collapse: African fintechs search for new partners as some banking services pause

    Silvergate collapse: African fintechs search for new partners as some banking services pause

    3 ways to check your JAMB result using phone 2023

    3 ways to check your JAMB result using phone 2023

    How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget

    How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget

  • Reviews
    TechEngage®

    An ambitious phone with Wild Camera & tricks

    TechEngage®

    Google Pixel 3 Review: Consistently Unbeatable Camera Lord

    TechEngage®

    Pocophone F1 review: “Flagship Killer” killer?

    Slim, Slick & Economically Premium

    Slim, Slick & Economically Premium

    TechEngage®

    NVIDIA’s Quadro RTX 4000 GPU to be a $900 graphics beast

    TechEngage®

    Xiaomi Mi 8 Pro review; Should we still go for Mi 8?

  • Noteworthy
    TechEngage®

    Russia to briefly “turn off” country’s Internet entry. But why?

    TechEngage®

    Sprint announces first solid plans to unveil 5G infrastructure at MWC19

    Drunk shopping could be a $45 billion industry

    Drunk shopping could be a $45 billion industry

    TechEngage®

    The advantages and benefits of electronic signature

    TechEngage®

    Father of “cut, copy, and paste” Larry Tesler, dies at 74

    TechEngage®

    How the use of modern technology is messing up our sleep

  • Science
    • All
    • Energy
    • Environment
    • Health
    • Space
    TechEngage®

    Asthma and technological innovations for treating it

    Virtual Healthcare; A revolution in medical technology

    Virtual Healthcare; A revolution in medical technology

    Revolutionizing Healthcare Management; Virtual Nurse

    Revolutionizing Healthcare Administration; Virtual Nurse

    TechEngage®

    Biotechnology 2018 trends that are a complete knockout

  • Opinions
    TechEngage®

    Fundamentals of Wealth Creation for Better Outcomes

    TechEngage®

    Change; The only Constant in this World

    TechEngage®

    Proactive & Reactive being two extremes of different worlds

    TechEngage®

    Walmart suffered cases of gender discrimination

    TechEngage®

    How Digital Education features; its Pros and Cons

    TechEngage®

    Impact of Violent Video Games on Youth

  • Applications
    TechEngage®

    Google Play Pass will give access to paid apps

    TechEngage®

    Quizlet reaches 50 Million Users milestone

    TechEngage®

    Eradicate Gender Inequality through Crowd mapping!

    TechEngage®

    How mobile phone apps can help pregnant women

    TechEngage®

    Apple News app will be broadcasting live election results

    TechEngage®

    TikTok becomes the most downloaded app on the App Store

  • Blockchain
    TechEngage®

    Common mistakes new crypto investors make

    TechEngage®

    Microsoft launches Azure Blockchain Dev Kit

    TechEngage®

    The mystery behind Twitter Bitcoin scams has been solved

    TechEngage®

    Make-A-Wish website hit with the cryptojacking plight

    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

  • Applications
    TechEngage®

    Google Play Pass will give access to paid apps

    TechEngage®

    Quizlet reaches 50 Million Users milestone

    TechEngage®

    Eradicate Gender Inequality through Crowd mapping!

    TechEngage®

    How mobile phone apps can help pregnant women

  • Culture
    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

  • Deals
    TechEngage®

    New York Times joins with Scribd to offer an economical subscription bundle

    TechEngage®

    Motorola puts up some scary good deals for Halloween

    TechEngage®

    Lavender version of Samsung Galaxy Note 9 will be $140 off

    TechEngage®

    Samsung trade up to Galaxy A7 provide; Holiday offers spree just got better

  • Events
    TechEngage®

    Nokia to launch new smartphones on April 8th

    TechEngage®

    What to expect from Samsung Galaxy Unpacked event

    TechEngage®

    What to expect from the OnePlus 9 launch event

    TechEngage®

    What to expect from Apple’s WWDC21 event

  • How-to
    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

  • Roundups
    TechEngage®

    Best Android Launchers of 2023

    10 Most Anticipated Upcoming Smartphones of 2023

    10 Most Anticipated Upcoming Smartphones of 2023

    TechEngage®

    Best Family Board Games to Buy on Amazon for 2023

    TechEngage®

    Top 10 Best Virtual Assistant Apps 2023

  • Startups
    Two-million-year-old DNA, oldest ever found, opens window to Greenland's past

    Two-million-year-old DNA, oldest ever found, opens window to Greenland’s past

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    This Chinese electric car giant will produce in Europe and that could change a lot of things

    Techabout Banner

    TechAbout: A venture that adds life to your dreams

    Avatar Of Nur

    These 5 Startups Will Change the Future of Health-tech

No Result
View All Result
Tech News
No Result
View All Result

Mitiga researchers disclose AWS Elastic IP hijacking vulnerability

December 23, 2022
in Tech News
Home Tech News

Our mission is to provide unbiased product reviews and timely reporting of technological advancements. Covering all latest reviews and advances in the technology industry, our editorial team strives to make every click count. We aim to provide fair and unbiased information about the latest technological advances.
Share on FacebookShare on Twitter

Gorodenkoff – stock.adobe.com

Cloud incident response supplier Mitiga has said a new AWS feature has led to a vulnerability that could allow hackers to access and steal Elastic IP addresses and gain control over AWS accounts

By

  • Ollie Withers and Brian McKenna

Published: 22 Dec 2022 9:45

Mitiga threat researchers have identified what they describe as a new potential attack vector leveraging recently introduced functionality in Amazon Web Services (AWS) technology that has made changing Elastic IP ownership in AWS Elastic Compute Cloud (EC2) environments easier.

Mitiga is an AWS partner, and provides software and services for security incident response and preparedness in cloud environments.

In October 2022, said the researchers, AWS announced a new Amazon Virtual Private Cloud feature, “Elastic IP transfer”, which allows the transfer of Elastic IP addresses from one AWS account to another. This feature makes it easier to move Elastic IP addresses during AWS account restructuring.

By exploiting this AWS Elastic IP Transfer feature, a threat actor with existing control over an AWS account could compromise an IP address.

This is, said Mitiga, is a “new vector for post-initial-compromise attack, which was not previously possible (and does not yet appear in the MITRE ATT&CK Framework)”. “Organisations may not be aware of its possibility,” it added.

Mitiga said the method “can expand the blast radius of an attack and allow further access to systems relying on IP allowlisting as their primary form of authentication or validation”.

It maintains that the potential attack is unique as “EIP was never considered a resource you should protect from exfiltration”. “The ‘hijacking an EIP’ scenario isn’t even shown as a technique in the MITRE ATT&CK knowledge base, which means this new technique can go ‘under the radar’.”

See also  ZikeDrive USB4 SSD Drive with speeds up to 3,763 MB/s is crowdfunding - NotebookCheck.net News

Malicious actors could attach a stolen EIP to an EC2 instance in their own AWS account for purposes that include reaching a victim’s network endpoints, secured by a firewall that possesses an ingress rule which allows connections from the stolen IP. They could also use the stolen IP for malicious activities, such as phishing campaigns. An EC2 instance is a virtual server in Amazon’s Elastic Compute Cloud for running applications on the AWS infrastructure.

The researchers’ advice to AWS users is to treat their EIP resources like other resources in AWS which are in danger of exfiltration. “Use the principle of least privilege on your AWS accounts and even disable the ability to transfer EIP entirely if you don’t need it,” it said.

Mitiga has published a detailed blog post about what they describe as Elastic IP Hijacking on its website. It notified the AWS security team about its findings before publishing, and incorporated the feedback it got as part of its post.





Read more on Cloud security

  • Amazon Elastic Container Service (Amazon ECS)

    DavidCarty

    By: David Carty

  • Use the AWS CLI to create an EC2 instance

    ErnestoMarquez

    By: Ernesto Marquez

  • How to create an EC2 instance from AWS Console

    ErnestoMarquez

    By: Ernesto Marquez

    ADVERTISEMENT
  • Amazon EC2 instance

    By: TechTarget Contributor

…. to be continued
Read the Original Article
Copyright for syndicated content belongs to the linked Source : Computer Weekly – https://www.computerweekly.com/news/252528592/Mitiga-researchers-disclose-AWS-Elastic-IP-hijacking-vulnerability

Tags: Mitigaresearchers

Denial of responsibility! tech-news.info is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.
Previous Post

Top 10 cyber security stories of 2022

Next Post

Top 10 women in tech and diversity in tech stories of 2022

RelatedPosts

African venture capital firms with funds in SVB weigh maintaining the relationship
Tech News

African venture capital firms with funds in SVB weigh maintaining the relationship

March 17, 2023
Silvergate collapse: African fintechs search for new partners as some banking services pause
Tech News

Silvergate collapse: African fintechs search for new partners as some banking services pause

March 17, 2023
3 ways to check your JAMB result using phone 2023
Tech News

3 ways to check your JAMB result using phone 2023

March 17, 2023
How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget
Tech News

How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget

March 17, 2023

Recommended.

  • All
  • Tech News
African venture capital firms with funds in SVB weigh maintaining the relationship

African venture capital firms with funds in SVB weigh maintaining the relationship

March 17, 2023
Silvergate collapse: African fintechs search for new partners as some banking services pause

Silvergate collapse: African fintechs search for new partners as some banking services pause

March 17, 2023
3 ways to check your JAMB result using phone 2023

3 ways to check your JAMB result using phone 2023

March 17, 2023
How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget

How startup cereal brand got Ronaldo, Dwayne Johnson, Serena Williams, and Micheal Jordan to endorse their products on a budget

March 17, 2023
We tried South Africa’s new real time payments system PayShap. Here’s what we found

We tried South Africa’s new real time payments system PayShap. Here’s what we found

March 17, 2023
Sony’s first 2023 TVs on sale now

Sony’s first 2023 TVs on sale now

March 17, 2023

Tags

-Inch (40)amazon (72)Android (60)Announces (32)Apple (228)Apples (40)Black (44)ChatGPT (41)China (28)Chinese (58)Cyber (45)Deals (59)Digital (35)First (44)Friday (36)Galaxy (166)Gaming (56)Google (164)Heres (50)iPhone (94)Launch (52)launches (54)Lenovo (40)Microsoft (97)Motorola (32)NVIDIA (28)OnePlus (118)Phone (39)Pixel (48)price (29)Realme (60)Redmi (48)Review (96)Samsung (220)Security (31)series (39)Smart (28)Tech News (357)Tesla (46)Twitter (77)unveils (33)Watch (68)Weekly (32)Windows (38)Xiaomi (95)

Categories

Archives

March 2023
MTWTFSS
 12345
6789101112
13141516171819
20212223242526
2728293031 
« Feb  
© 2022 Tech-News.info
DMCA.com Protection Status
No Result
View All Result
  • Home 2

© 2022 Tech-News.info
DMCA.com Protection Status

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.
error: Alert: Content selection is disabled!!
Go to mobile version

Mitiga researchers disclose AWS Elastic IP hijacking vulnerability