SugarCRM as initial access to AWS envs (Campaign)

The provided links reference analysis and reporting of an active, high-severity security incident: a critical vulnerability (including discussion of a zero-day and exposed access keys) was exploited in the wild against SugarCRM deployments, resulting in hundreds of infected servers and a cloud incident. The sources include vendor incident analysis, a Black Hat presentation, and press coverage describing large-scale exploitation and infection patterns.