⚠️ Cybersecurity researchers have uncovered the whoAMI…

⚠️ Cybersecurity researchers have uncovered the whoAMI attack, which allows hackers to gain access to AWS EC2 instances through a name confusion vulnerability in AMIs.

By publishing backdoored AMIs with specific names, attackers can exploit misconfigured API searches to trick systems into using their malicious AMIs.

Even simple misconfigurations in AMI searches can lead to code execution vulnerabilities, affecting both public and private AWS users.

Learn more: https://thehackernews.com/2025/02/new-whoami-attack-exploits-aws-ami-name.html