Tag: GitHub App ID spoofing

Simple CodeBuild misconfig let attackers seize AWS repos and cloud control

TL;DR Wiz researchers discovered a critical misconfiguration in AWS CodeBuild webhook filters that could let untrusted GitHub users trigger builds…