A subtle flaw, a massive blast radius.
ID: d2e09225-105e-58e6-a879-d8193cd07000
STIX ID: report--d2e09225-105e-58e6-a879-d8193cd07000
Feed Name: The CyberWire
Threat Score
Wiz Research disclosed 'CodeBreach', a critical supply-chain vulnerability in AWS CodeBuild caused by an unanchored regex filter that could let unauthenticated attackers trigger privileged builds, exfiltrate credentials, and inject malicious code into widely used GitHub repositories (including the AWS JavaScript SDK); AWS has since remediated the issue and implemented stronger safeguards.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.