Wiz researchers investigated and found the core of the flaw, a threat actor ID bypass due to unanchored regexes, and notified AWS. Within 48 hours, that hole was plugged, AWS said in a statement ...

The vulnerability was spotted in August 2025, so users should patch now.

A misconfigured AWS system that was remediated in August—averting a potentially massive and unprecedented software supply chain compromise—should serve as a warning to the cybersecurity industry about ...

AWS has published further details of an incident involving one of its artificial intelligence development tools, which saw an unknown threat actor inject a malicious prompt into a source code ...