Vulnerabilities
AWS Alerts Users to Critical Sandbox Bypass in QnABot Service
A new advisory from Amazon Web Services details a high-severity vulnerability allowing arbitrary code execution through a sandbox escape.
QnABot
Everything Threat Times has reported about QnABot: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS Fixes Auth Bypass in QnABot Lambda Hook Sample Affecting Versions 7.0.0-7.4.5
An authorization bypass flaw in an optional Amazon Q Business Lambda hook sample allows authenticated users to access arbitrary S3 objects in affected AWS accounts.