Amazon squashes years-old authentication bugs in AWS Kubernetes service

AWS fixed three authentication bugs present in one line of code in its IAM Authenticator for Kubernetes, used by the cloud giant's popular managed Kubernetes service Amazon EKS, that could allow an attacker to escalate privileges within a Kubernetes cluster. "I found several flaws in the authentication process that could …

[DJV]

Gafnit Amiga

I wonder if Gafnit Amiga found the bugs while at her Workbench. Hopefully her discoveries Kickstarted a code review within AWS.