Skip to content
Sign in
Artwork for Crying Out Cloud
Crying Out Cloud · January 15 · 17 min

CodeBreach: Hijacking the AWS Console with Yuval Avrahami

🚨 Everything you need to know about CodeBreach with Yuval Avrahami On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Yuval Avrahami to unpack a major supply-chain flaw that put cloud environments at risk ↓ Misconfigured CodeBuild instances used by AWS themselves One small regex mistake, huge consequences How an SDK used by the AWS Console could have been hijacked (!) The CI/CD controls that can mitigate this risk

0:00-17:20
Play in
Transcript file

transcript

No transcript — this publisher did not publish one.

show notes

🚨 Everything you need to know about CodeBreach with Yuval Avrahami


On this episode of Crying Out Cloud, Eden Koby Naftali & Amitai Cohen sit down with Wiz researcher Yuval Avrahami to unpack a major supply-chain flaw that put cloud environments at risk ↓


Misconfigured CodeBuild instances used by AWS themselves

One small regex mistake, huge consequences

How an SDK used by the AWS Console could have been hijacked (!)

The CI/CD controls that can mitigate this risk

more episodes

All episodes