Source:


By Nicholas Fearn

An AWS tech stack can aid business growth and facilitate efficient operations, but misconfigurations have become all too common and stall this progress

Amazon Web Services (AWS) has become the lifeblood of millions of modern businesses, both big and small. But while this popular cloud platform enables them to manage and scale their operations with impressive speed, simplicity and affordability, it also represents a significant security and privacy risk if mismanaged by users.

An insecure or improperly configured AWS tech stack provides a gateway for cyber criminals to enter corporate systems and sensitive files. The biggest example of this occurred in 2019, when an ex-Amazon employee stole the data of 100 million Capital One customers simply by exploiting a misconfigured web application firewall in the financial service giant’s AWS tech stack.

The incident ended with a high-profile lawsuit in which the financial services giant had to pay a $190m (£140m) settlement to affected customers. Other big businesses impacted by similar incidents include Accenture, Facebook, LinkedIn, Pegasus Airlines, Uber and Twilio. So, what can organisations do to secure their AWS tech stacks?

One of the biggest risks of an insecure AWS tech stack is data theft and exfiltration by cyber criminals, according to Rik Turner, chief cyber security analyst at Omdia. He explains this can happen when S3 buckets, which contain large volumes of files and sensitive metadata, aren’t set up properly.

As a result, S3 bucket access rights can be granted to employees who don’t require them for their roles, leading to insider threats. Or, worse, these crucial storage objects can end up on the public internet for anyone to access and abuse.

Sensitive corporate and customer data exposed in this way can lead to businesses experiencing “enormous financial losses”, says Sylvester Kaczmarek, a professor at online higher education provider the Open Institute of Technology. Their finances take a hit through regulatory fines, customer lawsuits and expensive recovery efforts that can last for months. Reputational damage is often substantial, too.

Additionally, weak or reused user credentials, the absence of cyber security logging and monitoring capabilities, and weaknesses in cyber defences like firewalls leave AWS tech stacks dangerously exposed to data breaches, he adds.

Data breaches can also stem from poorly secured Relational Database Service databases, Elastic Compute Cloud (EC2) instances and application programming interfaces, explains Bob McCarter, chief technology officer of risk and compliance software provider Navex. Erroneous identity and access management policies, a lack of multi-factor authentication, unpatched software and open ports are common security issues affecting these AWS services.

Besides costly data breaches, the day-to-day operations of modern businesses can grind to a halt in the aftermath of an EC2 instance compromise. The latter results in “impaired performance”, and even “a complete malfunctioning” of critical applications and workloads, explains Turner.

These issues are largely the product of mistakes made by AWS users and not cyber attacks targeted at Amazon, according to Neil MacDonald, vice-president and distinguished analyst at Gartner. But he emphasises that mistakes can easily happen due to the “sheer size, complexity and rate of change of AWS deployments”, adding that they are “impossible” to monitor without using appropriate security tools from AWS or other technology companies.

It is, therefore, the responsibility of AWS users to take steps to protect the data they upload to AWS cloud resources. This is enshrined in the cloud security shared responsibility model, with the responsibility of cloud companies like AWS being to secure the infrastructure they sell to customers.

Best practices to secure AWS tech stacks

When it comes to securing AWS tech stacks, many effective best practices are laid out in the AWS Well-Architected framework. McCarter explains that it offers a comprehensive guide for access management, infrastructure management, data privacy, application security, and cyber threat monitoring and detection.

Crystal Morin, cyber security strategist at cloud security company Sysdig, is another vocal supporter of this framework. She says it’s great for handling the prevention, protection, detection and response sides of cyber security. “This model helps you think through how to prevent problems in the first place, ensure your workloads have security in place, and then have the right tools in place to detect and respond to cloud security threats if and when they do take place,” says Morin.

As well as adhering to AWS’s own security best practices, MacDonald points out that the Center for Internet Security also offers advice for creating and maintaining a secure AWS tech stack. He adds that many modern cyber security tools are aligned with the latest AWS best practices, whether provided by Amazon or an outside organisation.

Given that lots of AWS-related security incidents are caused by inadequate access controls, Jake Moore – global cyber security advisor at antivirus maker ESET – urges organisations to implement the principle of least privilege to ensure access rights are limited to those who require them for their roles. This should be enforced as part of a wider identity and access management strategy.

Of course, staff hiring, attrition and promotion can make it difficult to manage AWS access controls. Still, Moore says businesses can use cyber security monitoring tools to track these changes and ensure access controls are amended accordingly, minimising security incidents. In addition to investing in these tools, he urges organisations with AWS stacks to regularly audit their cyber security posture to ensure security gaps are identified and closed swiftly. Automated analysis tools can help with this.

To ensure cyber criminals can’t steal sensitive data stored on and travelling between AWS servers, OPIT’s Kaczmarek says organisations must encrypt data when it’s at rest and in transit. Utilising the AWS Key Management service will help protect data at rest. Meanwhile, tight network security configurations are the key to securing transit data and wider network traffic. These should apply for virtual private clouds, Security Groups and Network Access Control Lists, according to Kaczmarek.

Organisations operating AWS tech stacks can log all network traffic using AWS CloudTrail and monitor it using AWS CloudWatch, says Kaczmarek. He adds that these efforts can be complemented by using multi-factor authentication, implementing security patches when they’re issued and replacing manual processes with infrastructure as code. The previous step is paramount for “consistency and auditing”, he claims.

 

Read the full article below:

Related posts

The Value of Hackathons
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Jan 5, 2026 6 min read

Bring talented tech experts together, set them a challenge, and give them a deadline. Then, let them loose and watch the magic happen. That, in a nutshell, is what hackathons are all about. They’re proven to be among the most productive tech events when it comes to solving problems and accelerating innovation.

What Is a Hackathon?

Put simply, a hackathon is a short-term event – often lasting just a couple of days, or sometimes even only a matter of hours – where tech experts come together to solve a specific problem or come up with ideas based on a central theme or topic. As an example, teams might be tasked with discovering a new way to use AI in marketing or to create an app aimed at improving student life.

The term combines the words “hack” and “marathon,” due to how participants (hackers or programmers) are encouraged to work around-the-clock to create a prototype, proof-of-concept, or new solution. It’s similar to how marathon runners are encouraged to keep running, putting their skills and endurance to the test in a race to the finish line.

The Benefits of Hackathons

Hackathons provide value both for the companies that organize them and the people who take part. Companies can use them to quickly discover new ideas or overcome challenges, for example, while participants can enjoy testing their skills, innovating, networking, and working either alone or as part of a larger team.

Benefits for Companies and Sponsors

Many of the world’s biggest brands have come to rely on hackathons as ways to drive innovation and uncover new products, services, and opportunities. Meta, for example, the brand behind Facebook, has organized dozens of hackathons, some of which have led to the development of well-known Facebook features, like the “Like” button. Here’s how hackathons help companies:

  • Accelerate Innovation: In fast-moving fields like technology, companies can’t always afford to spend months or years working on new products or features. They need to be able to solve problems quickly, and hackathons create the necessary conditions to deliver rapid success.
  • Employee Development: Leading companies like Meta have started to use annual hackathons as a way to not only test their workforce’s skills but to give employees opportunities to push themselves and broaden their skill sets.
  • Internal Networking: Hackathons also double up as networking events. They give employees from different teams, departments, or branches the chance to work with and learn from one another. This, in turn, can promote or reinforce team-oriented work cultures.
  • Talent Spotting: Talents sometimes go unnoticed, but hackathons give your workforce’s hidden gems a chance to shine. They’re terrific opportunities to see who your best problem solvers and most creative thinkers at.
  • Improving Reputation: Organizing regular hackathons helps set companies apart from their competitors, demonstrating their commitment to innovation and their willingness to embrace new ideas. If you want your brand to seem more forward-thinking and innovative, embracing hackathons is a great way to go about it.

Benefits for Participants

The hackers, developers, students, engineers, and other people who take part in hackathons arguably enjoy even bigger and better benefits than the businesses behind them. These events are often invaluable when it comes to upskilling, networking, and growing, both personally and professionally. Here are some of the main benefits for participants, explained:

  • Learning and Improvement: Hackathons are golden opportunities for participants to gain knowledge and skills. They essentially force people to work together, sharing ideas, contributing to the collective, and pushing their own boundaries in pursuit of a common goal.
  • Networking: While some hackathons are purely internal, others bring together different teams or groups of people from different schools, businesses, and places around the world. This can be wonderful for forming connections with like-minded individuals.
  • Sense of Pride: Everyone feels a sense of pride after accomplishing a project or achieving a goal, but this often comes at the end of weeks or months of effort. With hackathons, participants can enjoy that same satisfying feeling after just a few hours or a couple of days of hard work.
  • Testing Oneself: A hackathon is an amazing chance to put one’s skills to the test and see what one is truly capable of when given a set goal to aim for and a deadline to meet. Many participants are surprised to see how well they respond to these conditions.
  • Boosting Skills: Hackathons provide the necessary conditions to hone and improve a range of core soft skills, such as teamwork, communication, problem-solving, organization, and punctuality. By the end, participants often emerge with more confidence in their abilities.

Hackathons at OPIT

The Open Institute of Technology (OPIT) understands the unique value of hackathons and has played its part in sponsoring these kinds of events in the past. OPIT was one of the sponsors behind ESCPHackathon 6, for example, which involved 120 students given AI-related tasks, with mentorship and guidance from senior professionals and developers from established brands along the way.

Marco Fediuc, one of the participants, summed up the mood in his comments:

“The hackathon was a truly rewarding experience. I had the pleasure of meeting OPIT classmates and staff and getting to know them better, the chance to collaborate with brilliant minds, and the opportunity to take part in an exciting and fun event.

“Participating turned out to be very useful because I had the chance to work in a fast-paced, competitive environment, and it taught me what it means to stay calm and perform under pressure… To prospective Computer Science students, should a similar opportunity arise, I can clearly say: Don’t underestimate yourselves!”

The new year will also see the arrival of OPIT Hackathon 2026, giving more students the chance to test their skills, broaden their networks, and enjoy the one-of-a-kind experiences that these events never fail to deliver. This event is scheduled to be held February 13-15, 2026, and is open to all OPIT Bachelor’s and Master’s students, along with recent graduates. Interested parties have until February 1 to register.

Read the article
OPIT’s First Career Fair
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Jan 5, 2026 6 min read

The Open Institute of Technology (OPIT) recently held its first-ever career fair to showcase its wide array of career education options and services. Representatives from numerous high-profile international companies were in attendance, and students enjoyed unprecedented opportunities to connect with business leaders, expand their professional networks, and pave the way for success in their future careers.

Here’s a look back at the event and how it ties into OPIT’s diverse scope of career services.

Introducing OPIT

For those who aren’t yet familiar, OPIT is an EU-accredited Higher Education Institution, offering online degrees in technological fields such as computer science, data science, artificial intelligence, cybersecurity, and digital business. Aimed at making high-level tech education accessible to all, OPIT has assembled a stellar team of tutors and experts to train the tech leaders of tomorrow.

The First OPIT Career Fair

OPIT’s first career fair was held on November 19 and 20. And as with OPIT’s lectures, it was an exclusively online event, which ensured that every attendee had equal access to key lectures and information. Interested potential students from all over the world were able to enjoy the same great experience, demonstrating a core principle that OPIT has championed from the very start – the principles of accessibility and the power of virtual learning.

More than a dozen leading international companies took part in the event, with the full guest list including representatives from:

  • Deloitte
  • Dylog Hitech
  • EDIST Engineering Srl
  • Tinexta Cyber
  • Datapizza
  • RWS Group
  • WE GRELE FRANCE
  • Avatar Investments
  • Planet Farms
  • Coolshop
  • Hoist Finance Italia
  • Gruppo Buffetti S.p.A
  • Nesperia Group
  • Fusion AI Labs
  • Intesi Group
  • Reply
  • Mindsight Ventures

This was a fascinating mix of established enterprises and emerging players. Deloitte, for example, is one of the largest professional services networks in the world in terms of both revenue and number of employees. Mindsight Ventures, meanwhile, is a newer but rapidly emerging name in the fields of AI and business intelligence.

The Response

The first OPIT career fair was a success, with many students in attendance expressing their joy at being able to connect with such a strong lineup of prospective employers.

OPIT Founder and Director Riccardo Ocleppo had this to say:

“I often say internally that our connection with companies – through masterclasses, thesis and capstone projects, and career opportunities – is the ‘cherry on the cake’ of the OPIT experience!

“It’s also a core part of our mission: making higher education more practical, more connected, and more aligned with what happens in the real world.

“Our first Career Fair says a lot about our commitment to building an end-to-end learning and professional growth experience for our community of students.

“Thank you to the Student and Career Services team, and to Stefania Tabi for making this possible.”

Representatives from some of the companies that attended also shared positive impressions of the event. A representative from Nesperia Group, for example, said:

“Nesperia Group would like to thank OPIT for the warm welcome we received during the OPIT Career Day. We were pleased to be part of the event because we met many talented young professionals. Their curiosity and their professional attitude really impressed us, and it’s clear that OPIT is doing an excellent job supporting their growth. We really believe that events like these are important because they can create a strong connection between companies and future professionals.”

The Future

Given the enormous success of the first OPIT career fair, it’s highly likely that students will be able to enjoy more events like this in the years to come. OPIT is clearly committed to making the most of its strong business connections and remarkable network to provide opportunities for growth, development, and employment, bringing students and businesses together.

Future events will continue to allow students to connect with some of the biggest businesses in the world, along with emerging names in the most exciting and innovative tech fields. This should allow OPIT graduates to enter the working world with strong networks and firm connections already established. That, in turn, should make it easier for them to access and enjoy a wealth of beneficial professional opportunities.

Given that OPIT also has partnerships in place with numerous other leading organizations, like Hype, AWS, and Accenture, the number and variety of the companies potentially making appearances at career fairs in the future should no doubt increase dramatically.

Other Career Services at OPIT

The career fair is just one of many ways in which OPIT leverages its company connections and offers professional opportunities and career support to its students. Other key career services include:

  • Career Coaching: Students are able to schedule one-on-one sessions with their own mentors and career advisors. They can receive feedback on their resumes, practice and improve their interview skills, or work on clear action plans that align with their exact professional goals.
  • Resource Hub: The OPIT Resource Hub is jam-packed with helpful guides and other resources to help students plan out and take smart steps in their professional endeavors. With detailed insights and practical tips, it can help tech graduates get off to the best possible start.
  • Career Events: The career fair is only one of several planned career-related events organized by OPIT. Other events are planned to give students the chance to learn from and engage with industry experts and leading tech firms, with workshops, career skills days, and more.
  • Internships: OPIT continues to support students after graduation, offering internship opportunities with leading tech firms around the world. These internships are invaluable for gaining experience and forging connections, setting graduates up for future success.
  • Peer Mentoring: OPIT also offers a peer mentoring program in which existing students can team up with OPIT alumni to enjoy the benefits of their experience and unique insights.

These services – combined with the recent career day – clearly demonstrate OPIT’s commitment to not merely educating the tech leaders of the future, but also to supporting their personal and professional development beyond the field of education, making it easier for them to enter the working world with strong connections and unrivaled opportunities.

Read the article