Episode
A subtle flaw, a massive blast radius.
- Podcast
- Research Saturday
- Published
- Mar 21, 2026
- Duration seconds
- 1038
- Processing state
not_requested- Canonical source
- https://thecyberwire.com/podcasts/research-saturday/417/notes
Actions
POST https://stenobird.com/v1/public/podcasts/research-saturday-1377435/episodes/a-subtle-flaw-a-massive-blast-radius/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/research-saturday-1377435/a-subtle-flaw-a-massive-blast-radius.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
Yuval Avrahami from Wiz joins to share their work on "CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild." Wiz Research uncovered “CodeBreach,” a critical supply chain vulnerability caused by a subtle misconfiguration in AWS CodeBuild pipelines that allowed attackers to take over key GitHub repositories, including the widely used AWS JavaScript SDK that powers the AWS Console. By exploiting an unanchored regex filter, unauthenticated attackers could trigger privileged builds, steal credentials, and potentially inject malicious code into software used across a majority of cloud environments. AWS has since remediated the issue and introduced stronger safeguards, but the incident highlights a growing trend of attackers targeting CI/CD pipelines where small misconfigurations can lead to massive downstream impact. The research can be found here: CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild