RESEARCHERS UNCOVER ECSCAPE FLAW IN AMAZON ECS ENABLING CROSS-TASK CREDENTIAL THEFT

Summary from the TLDR InfoSec newsletter

“ECScape” is a flaw in Amazon ECS on EC2 that allows low-privilege containers to steal credentials from higher-privilege tasks on the same instance, enabling privilege escalation and lateral movement. Amazon advises isolating tasks, using AWS Fargate for true separation, and enforcing least-privilege policies to mitigate risks.