CRITICAL FLAW IN AWS CONSOLE RISKED COMPROMISE OF BUILD ENVIRONMENT

Summary from the TLDR InfoSec newsletter

Researchers from Wiz discovered a vulnerability in the way CodeBuild CI pipelines handled build triggers. This vulnerability could have been exploited to take over AWS repositories, including the AWS JavaScript SDK, which powers the AWS console. AWS immediately took steps to remediate the vulnerability before any exploitation occurred.