Free AWS Security Whitepaper
    Toc Consulting Logo
    All Tags

    Systems Manager

    3 items across 2 sections

    Blog Posts1

    cloudstorm: Load Testing From Many AWS Regions With One Command Line

    cloudstorm is a free, open-source CLI that runs Locust, k6, JMeter or Artillery on EC2 instances in several AWS regions, merges the results into one report, and cleans up after itself.

    6 min read · 2026-10-19
    Weekly News2

    Week 35 - Aug 24-30, 2026

    A genuinely quiet week closes with a single but serious finding: a path traversal flaw in the SSM Agent's download-content plugin can be abused to write files - with root privileges - outside the intended directory.

    2026-08-24 - 2026-08-30

    Week 37 - Sep 7 - Sep 13, 2026

    No major breach this week, but a busy one for AWS security bulletins: five new CVEs, led by a critical OS command injection in postgres-mcp-server that turns its read-only safeguard into full command execution. Also patched: a mysql-mcp-server read-only bypass, an SSM Session Manager SSRF exposing temporary IAM credentials, an XXE in the AWS Advanced JDBC Wrapper, and a denial-of-service in the AWS SDK for Go v2.

    2026-09-07 - 2026-09-13

    Related Tags

    AWS38IAM20EC215CVE15Open Source11MCP8CLI Tools6Developer Tools5Load Testing1Path Traversal1postgres-mcp-server1mysql-mcp-server1

    Need Help with AWS Security?

    Our AWS security experts can help you implement best practices across all these topics.

    Contact Us