cybersecurity
"inventories, hosts, Ansible playbooks, OpenShift install blueprints, CI/CD runners, VPN profiles, Quay/registry configs, Vault integrations, backups"
No password needed to gain access to key component of EBS thanks to new bug
New cloud hacking competition comes with strict IP rules and copycat claims.
UK government asks for another back door, to a collective groan from infosec community.
Existing CISO stays on as his deputy.
Expect this to get exploited - like the bug before it...
"By submitting the vulnerability, I had implicitly agreed to a set of legal terms that prohibited any form of public disclosure, indefinitely. It was now locked in a box. No advisory. No community alert..."
Brussels, Berlin, Heathrow all impacted.