A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories before fixes in Sep 2025.
A critical security weakness in Amazon Web Services’ CodeBuild service left GitHub repositories vulnerable to hijacking, raising fresh concerns about the resilience of cloud-based development ...