OpenSearch
3 items across 1 section
Week 33 - Aug 10-16, 2026
A quiet week for feature launches turns into a busy one for patching: AWS ships four security bulletins in 48 hours, three touching OpenSearch (authorization bypass, SSRF, and a SQL grammar bypass) and one an out-of-bounds Base64 decoder bug in the AWS SDK for C++.
Week 34 - Aug 17-23, 2026
Truffle Security reports that more than 9,300 of 10,616 re-tested leaked AWS keys still authenticate, 768 of them with full administrator or root access, some five years after first appearing publicly. Security Hub Extended adds Supply Chain Security as its tenth category. AWS also ships seven security bulletins this week, mostly across OpenSearch Dashboards and FreeRTOS-Kernel.
Week 42 - Oct 12 - Oct 18, 2026
Six new AWS security bulletins this week, led by an Amazon Neptune query-engine issue that its CVE record scores 9.9 (CRITICAL) and a Linux kernel virtio-net/TAP flaw that affects self-managed KVM hosts but not EC2, Lambda or Fargate. On the defensive side, OpenSearch Service gets per-index KMS keys, Security Hub adds resource criticality and the Cyber Risk Institute profile, Secrets Manager rotates Databricks and Twilio credentials, and Transfer Family host keys can live in Secrets Manager.
Need Help with AWS Security?
Our AWS security experts can help you implement best practices across all these topics.
Contact Us