AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks
A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories before fixes in Sep 2025.
More info