Hackers Target AWS Root Accounts at 150+ Organizations in Password-Spraying Campaign

Datadog Security Research observed a password-spraying campaign targeting AWS root accounts at more than 150 organizations between July 24 and August 23, 2026, with repeated failed console login attempts against highly privileged identities. The AWS root user is the original identity created when an AWS account is registered. It has unrestricted access to cloud resources, […] The post Hackers Target AWS Root Accounts at 150+ Organizations in Password-Spraying Campaign appeared first on Cyber Security News.