WHOAMI: A CLOUD IMAGE NAME CONFUSION ATTACK

Summary from the TLDR InfoSec newsletter

Researchers discovered a "whoAMI" vulnerability where attackers could exploit AWS accounts by publishing malicious AMIs with specific names, targeting systems that don't specify owner verification when searching for AMIs. This post dives into this new attack.