Breaking News

Severe Amazon ECR Public Gallery Flaw Could Have Facilitated Massive Supply Chain Attack

Severe Amazon ECR Public Gallery Flaw Could Have Facilitated Massive Supply Chain Attack
A researcher at the cloud security company Lightspin recently discovered a flaw in the Amazon Web Services (AWS) Elastic Container Registry (ECR) Public Gallery that threat actors could have exploited to delete or modify container images with billions of downloads. The leveraging of an exploit in this manner would constitute a massive supply

Go to Source
Author: Nathan Wasson