Infosec Brain Worms

Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!

Links:

• This collection of best practices for managing root users at scale in AWS is worth a read
• 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms.
• 1Health is this week's winner of the S3 Bucket Negligence Award
• Barracuda advises customers to rip the entire device out, throw it away, and replace it entirely. 
• S3 buckets being used in attacks on npm packages
• Issue with AWS Directory Service EnableRoleAccess
• Tool of the week: xeol is an end-of-life package scanner.