IAM

Everything AppSec Scoop has reported about IAM: 2 stories, newest first. Part of our Vulnerabilities coverage.

AWS Serverless CI/CD Flaw Lets Repo Pushers Escalate Privileges to Access External Resources

A high-severity flaw in the AWS CICD-toolchain-for-serverless-applications sample code allows attackers to escalate privileges within the same account.

Oct 21, 2026

Vulnerabilities

Organisations at Risk: AWS HealthLake MCP SSRF Lets Users Steal Temp Credentials via Pagination Tokens

A server-side request forgery flaw in the HealthLake MCP server allows remote attackers to steal AWS temporary security credentials via manipulated pagination tokens.

Oct 15, 2026