"Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue"

According to the application security company Miggo, about 15,000 apps that use Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication may be vulnerable to attacks. The attacks dubbed "ALBeast" stem from a critical configuration issue, not a vulnerability in the AWS ALB solution. AWS was informed of the possible risks in April, and since then, it has updated its documentation and added new code to help prevent ALBeast attacks. This article continues to discuss the vulnerability of thousands of apps using AWS ALB to ALBeast attacks.

SecurityWeek reports "Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue"

Submitted by grigby1