infrastructure-as-code

Everything Threat Times has reported about infrastructure-as-code: 2 stories, newest first. Part of our Vulnerabilities coverage.

Cloud Security

Infrastructure-as-Code Misconfigurations Explained for Beginners

Threat TimesOct 14, 2026

A single typo in your deployment script can expose sensitive data to the public internet without any visible security breach indicators.

Vulnerabilities

AWS CDK Asset Bundling Vulnerability Allows Symlink Injection via Docker Files

Threat TimesOct 8, 2026

A flaw in AWS CDK allows untrusted Docker files to insert symlinked files during asset bundling, affecting versions before 2.267.0.