🔶 Hat Trick: AWS introduced same RCE vulnerability three times in four years

Amazon has introduced the same dependency confusion issue at least on 3 separate occasions when adding new packages to the Neuron SDK registry.

https://giraffesecurity.dev/posts/amazon-hat-trick/

#aws