AWS CDK Vulnerability: Missing S3 Bucket Could Lead to Account Takeover

Security researchers Ofek Itach and Yakir Kadkoda from Aqua Security’s Team Nautilus uncovered a critical vulnerability in the AWS Cloud Development Kit (CDK) that could lead to a full account...