AWS Patches SDK Flaw Allowing Credential Theft via Region Field Manipulation

Amazon Web Services (AWS) has patched a critical flaw across seven of its Software Development Kits (SDKs.) The vulnerability allowed attackers to manipulate the region field in SDK calls, redirecting requests to attacker-controlled domains and potentially leading to the theft of sensitive credentials, including Kubernetes service account tokens. The issue was discovered by product security startup Pi Inc.