bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Monday, October 12, 2026

GuardDuty Extended Threat Detection Gets Five New Attack Indicators

Amazon GuardDuty now tags attack sequences with five new indicator types—MALICIOUS_PACKAGE, MISCONFIGURATION, REACHABILITY, SENSITIVE_DATA, and VULNERABILITY—making it easier to spot the full picture of threats in your cloud environment. As a cloud engineer, you should review your GuardDuty findings to leverage these richer signals and catch attack chains earlier before they escalate.

source: [aws/security-blog]