Curated threat intel for security leaders
incident-resp 2026-09-17

Unit 42's Insights on Cross-Environment Attacks

Unit 42's Insights on Cross-Environment Attacks

A coordinated attack by APT10 leverages compromised AWS S3 buckets to pivot to on-premises environments, exploiting vulnerabilities in cloud providers' AWS S3 buckets (CVE-2021-4512, CVSS score 7.5).

Bottom line: Security teams must prioritize cross-environment monitoring to detect and prevent pivot attacks.

What's happening: APT10, a nation-state actor believed to be from China, compromised AWS S3 buckets (CVE-2021-4512, CVSS score 7.5) to inject malicious code, which was then transferred to an organization's AWS EC2 instance, gaining access to sensitive data.

What to do: Implement Unit 42 Managed XSIAM to monitor cross-environment attacks and detect pivot attacks, ensuring timely incident response and reducing the risk of data breaches.

Source: Unit 42