A simple CodeBuild flaw put every AWS environment at risk – and pwned ‘the central nervous system of the cloud’

And it’s ‘not unique to AWS,’ researcher tells The Reg

A critical misconfiguration in AWS’s CodeBuild service allowed complete takeover of the cloud provider’s own GitHub repositories and put every AWS environment in the world at risk, according to Wiz security researchers.…