CRITICALAdvisoryApr 04, 2026
Action required
Audit all AWS API keys and service account credentials for creation dates around the Trivy compromise window. Rotate any keys created or last rotated before March 10. Search CloudTrail logs for API calls from unfamiliar source IPs and disabled MFA sessions.
Affected products
Amazon Web ServicesEuropean CommissionLiteLLM
Linked articles