Vulnerabilities
AWS SAM CLI Terraform Hook Flaw Lets Attackers Run Host Commands
A command injection flaw in the AWS SAM CLI Terraform hook allows execution of arbitrary commands on build hosts, fixed in version 1.166.2.
Terraform
Everything RedTeam Monitor has reported about Terraform: 2 stories, newest first. Part of our Vulnerabilities coverage.
Malware & Ransomware
North Korean Actors Deploy FLATROOF and ROOFDECK via Compromised Terraform Infrastructure Tool
North Korean-linked actors used a compromised infrastructure tool in July 2026 to deploy credential stealers and backdoors across multiple operating systems.