{"id":4175,"date":"2026-08-24T13:00:00","date_gmt":"2026-08-24T13:00:00","guid":{"rendered":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/"},"modified":"2026-08-24T14:59:06","modified_gmt":"2026-08-24T14:59:06","slug":"aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft","status":"publish","type":"post","link":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/","title":{"rendered":"AWS patches SDK flaw that turned a area subject into credential theft"},"content":{"rendered":"<p><br \/>\n<br \/><img decoding=\"async\" src=\"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png\" \/><\/p>\n<div>\n<p>Amazon Net Companies Inc. has patched a flaw throughout seven of its software program improvement kits after product safety startup Pi Inc. traced a single bug report back to roughly 2,500 situations of the identical defect, Pi revealed at present.<\/p>\n<p>Each AWS SDK builds the hostname it calls from a template. The area drops into the center of https:\/\/{service}.{area}.amazonaws.com. A legitimate area seems to be like us-east-1. On the susceptible code paths, nothing checked for that.<\/p>\n<p>Loads of functions let a person choose the area, so Pi\u2019s researchers picked \u201c@attacker.com#\u201d. The SDK constructed https:\/\/sts.@attacker.com#.amazonaws.com and signed a request to that deal with. A URL parser reads all the pieces earlier than the @ as a username. The whole lot after the # will get discarded. What survives is attacker.com.<\/p>\n<p>Redirecting an bizarre software programming interface name leaks a request signature. That&#8217;s survivable. The AssumeRoleWithWebIdentity name made by Elastic Kubernetes Service workloads, Cognito functions and OpenID Join integrations will not be bizarre. That request carries a bearer token in its physique, in plaintext.<\/p>\n<p>In a single licensed engagement the goal ran inside EKS. The redirected name carried the pod\u2019s Kubernetes service account token to a server the testers managed. Replaying it to AWS Safety Token Service returned dwell credentials contained in the buyer\u2019s account.<\/p>\n<p>Pi mentioned it handed its platform the unique report and nothing else, with no per-language guidelines and no listing of companies to verify. The software program abstracted the susceptible code into what the corporate calls an anti-pattern, an outline of the conduct fairly than the syntax, then went in search of that conduct elsewhere.<\/p>\n<p>AWS generates SDK purchasers for greater than 400 companies from shared service fashions, so a lacking verify within the generator lands in every single place without delay. Python and Ruby had guarded towards it for years. A lot of the others had not.<\/p>\n<p>The repair runs to some traces. Validate the area as a number label, letters, digits and hyphens solely, earlier than it reaches the hostname. That validation lives inside every generated SDK, not in a single shared place. AWS ended up writing it seven occasions.<\/p>\n<p>Pi reported it to AWS on Oct. 14, 2025. A primary patch was dedicated inside per week. The advisories didn&#8217;t exit till Jan. 8 and Jan. 9. Go v2 was final. Solely the .NET SDK drew a CVE, CVE-2026-22611, rated low at 3.7 on the CVSS scale, and Pi co-founder and Chief Govt Man Arazi is known as within the acknowledgments.<\/p>\n<p>AWS didn&#8217;t body any of this as a vulnerability. Its advisories name the change a defense-in-depth enhancement. Validating that enter, AWS says, is the developer\u2019s job below the shared duty mannequin.<\/p>\n<p>Pi calls the score incomplete. The corporate examined the flaw the place it really runs in third-party platforms that embed an AWS SDK and expose the area subject and mentioned seven of seven have been exploitable. Every leaked dwell AWS credentials to a callback server.<\/p>\n<p>Some have been well-known corporations and a few have been safety distributors. All have been notified and remediated earlier than publication. A per-instance rating charges one final result in a single place, Pi wrote, and has no technique to categorical a category of conduct a code generator has copied into hundreds of purchasers.<\/p>\n<p>Pi\u00a0 relies in San Francisco. Brightmind Companions and Third Level Ventures led a $35 million spherical for the corporate in June. CrowdStrike Holdings Inc. Chief Govt George Kurtz and Armis Inc. founders Yevgeny Dibrov and Nadir Izrael additionally additionally traders.<\/p>\n<p>Picture: SiliconANGLE\/GPT Picture 2<\/p>\n<div id=\"silic-2375342481\" class=\"silic-after-content silic-entity-placement\">\n<p>Assist our mission to maintain content material open and free by participating with theCUBE neighborhood. Be part of theCUBE\u2019s Alumni Belief Community, the place expertise leaders join, share intelligence and create alternatives.<\/p>\n<p>15M+ viewers of theCUBE movies, powering conversations throughout AI, cloud, cybersecurity and extra<br \/>\n11.4k+ theCUBE alumni \u2014 Join with greater than 11,400 tech and enterprise leaders shaping the long run via a novel trusted-based community<\/p>\n<div class=\"grid grid-cols-2 md:grid-cols-4 gap-6 mb-12 max-w-4xl mx-auto\" data-replit-metadata=\"client\/src\/pages\/Home.tsx:126:12\" data-component-name=\"div\">\n<div class=\"text-center\" data-replit-metadata=\"client\/src\/pages\/Home.tsx:142:14\" data-component-name=\"div\">\n<div style=\"text-align: left;\" data-replit-metadata=\"client\/src\/pages\/Home.tsx:145:16\" data-component-name=\"div\">SiliconANGLE Media is a acknowledged chief in digital media innovation, uniting breakthrough expertise, strategic insights and real-time viewers engagement. Because the guardian firm of SiliconANGLE, theCUBE Community, theCUBE Analysis, CUBE365, theCUBE AI and theCUBE SuperStudios \u2014 with flagship areas in Silicon Valley and the New York Inventory Alternate \u2014 SiliconANGLE Media operates on the intersection of media, expertise and AI.<\/div>\n<\/div>\n<\/div>\n<p style=\"text-align: left;\"><span style=\"font-weight: 400;\">Based by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has constructed a dynamic ecosystem of industry-leading digital media manufacturers that attain 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking floor in viewers interplay, leveraging theCUBEai.com neural community to assist expertise corporations make data-driven selections and keep on the forefront of {industry} conversations.<\/span><\/p>\n<\/div>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/siliconangle.com\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Amazon Net Companies Inc. has patched a flaw throughout seven of its software program improvement kits after product safety startup Pi Inc. traced a single bug report back to roughly 2,500 situations of the identical defect, Pi revealed at present. Each AWS SDK builds the hostname it calls from a template. The area drops into [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":4177,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png","fifu_image_alt":"","jnews-multi-image_gallery":[],"jnews_single_post":[],"jnews_primary_category":[],"jnews_override_bookmark_settings":[],"jnews_social_meta":[],"jnews_override_counter":[],"footnotes":""},"categories":[6],"tags":[1369,4418,4417,4414,2980,4416,1619,4419,4415],"class_list":["post-4175","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-business","tag-aws","tag-credential","tag-field","tag-flaw","tag-patches","tag-region","tag-sdk","tag-theft","tag-turned"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AWS patches SDK flaw that turned a area subject into credential theft - Future News 24<\/title>\n<meta name=\"description\" content=\"AWS patches SDK flaw that turned a region field into credential theft - SiliconANGLE\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS patches SDK flaw that turned a area subject into credential theft - Future News 24\" \/>\n<meta property=\"og:description\" content=\"AWS patches SDK flaw that turned a region field into credential theft - SiliconANGLE\" \/>\n<meta property=\"og:url\" content=\"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/\" \/>\n<meta property=\"og:site_name\" content=\"Future News 24\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-24T13:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-24T14:59:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png\" \/>\n<meta name=\"author\" content=\"Future News 24\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Future News 24\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/\"},\"author\":{\"name\":\"Future News 24\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#\\\/schema\\\/person\\\/cecad1bde21cfc357cf70128144d6c83\"},\"headline\":\"AWS patches SDK flaw that turned a area subject into credential theft\",\"datePublished\":\"2026-08-24T13:00:00+00:00\",\"dateModified\":\"2026-08-24T14:59:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/\"},\"wordCount\":797,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/images.siliconangle.com\\\/blogs.dir\\\/1\\\/files\\\/2026\\\/08\\\/piawsflaw.png\",\"keywords\":[\"AWS\",\"credential\",\"field\",\"flaw\",\"Patches\",\"region\",\"SDK\",\"theft\",\"turned\"],\"articleSection\":[\"Industry &amp; Business\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/\",\"url\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/\",\"name\":\"AWS patches SDK flaw that turned a area subject into credential theft - Future News 24\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/images.siliconangle.com\\\/blogs.dir\\\/1\\\/files\\\/2026\\\/08\\\/piawsflaw.png\",\"datePublished\":\"2026-08-24T13:00:00+00:00\",\"dateModified\":\"2026-08-24T14:59:06+00:00\",\"description\":\"AWS patches SDK flaw that turned a region field into credential theft - SiliconANGLE\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#primaryimage\",\"url\":\"https:\\\/\\\/images.siliconangle.com\\\/blogs.dir\\\/1\\\/files\\\/2026\\\/08\\\/piawsflaw.png\",\"contentUrl\":\"https:\\\/\\\/images.siliconangle.com\\\/blogs.dir\\\/1\\\/files\\\/2026\\\/08\\\/piawsflaw.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/2026\\\/08\\\/24\\\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/futurenews24.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS patches SDK flaw that turned a area subject into credential theft\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#website\",\"url\":\"https:\\\/\\\/futurenews24.com\\\/\",\"name\":\"Future News 24\",\"description\":\"The Smart Hub for AI and Next-Gen Innovation\",\"publisher\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/futurenews24.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#organization\",\"name\":\"Future News 24\",\"url\":\"https:\\\/\\\/futurenews24.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/futurenews24.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/fn24-favicon.png\",\"contentUrl\":\"https:\\\/\\\/futurenews24.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/fn24-favicon.png\",\"width\":250,\"height\":250,\"caption\":\"Future News 24\"},\"image\":{\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/futurenews24.com\\\/#\\\/schema\\\/person\\\/cecad1bde21cfc357cf70128144d6c83\",\"name\":\"Future News 24\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d57f07142d73cb5503ab2446ea7bc9ef3d0a5ba378d64a6157692311e42bf097?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d57f07142d73cb5503ab2446ea7bc9ef3d0a5ba378d64a6157692311e42bf097?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d57f07142d73cb5503ab2446ea7bc9ef3d0a5ba378d64a6157692311e42bf097?s=96&d=mm&r=g\",\"caption\":\"Future News 24\"},\"sameAs\":[\"https:\\\/\\\/futurenews24.com\"],\"url\":\"https:\\\/\\\/futurenews24.com\\\/index.php\\\/author\\\/mridulpahuja20\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AWS patches SDK flaw that turned a area subject into credential theft - Future News 24","description":"AWS patches SDK flaw that turned a region field into credential theft - SiliconANGLE","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/","og_locale":"en_US","og_type":"article","og_title":"AWS patches SDK flaw that turned a area subject into credential theft - Future News 24","og_description":"AWS patches SDK flaw that turned a region field into credential theft - SiliconANGLE","og_url":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/","og_site_name":"Future News 24","article_published_time":"2026-08-24T13:00:00+00:00","article_modified_time":"2026-08-24T14:59:06+00:00","og_image":[{"url":"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png","type":"","width":"","height":""}],"author":"Future News 24","twitter_card":"summary_large_image","twitter_image":"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png","twitter_misc":{"Written by":"Future News 24","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#article","isPartOf":{"@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/"},"author":{"name":"Future News 24","@id":"https:\/\/futurenews24.com\/#\/schema\/person\/cecad1bde21cfc357cf70128144d6c83"},"headline":"AWS patches SDK flaw that turned a area subject into credential theft","datePublished":"2026-08-24T13:00:00+00:00","dateModified":"2026-08-24T14:59:06+00:00","mainEntityOfPage":{"@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/"},"wordCount":797,"commentCount":0,"publisher":{"@id":"https:\/\/futurenews24.com\/#organization"},"image":{"@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#primaryimage"},"thumbnailUrl":"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png","keywords":["AWS","credential","field","flaw","Patches","region","SDK","theft","turned"],"articleSection":["Industry &amp; Business"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/","url":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/","name":"AWS patches SDK flaw that turned a area subject into credential theft - Future News 24","isPartOf":{"@id":"https:\/\/futurenews24.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#primaryimage"},"image":{"@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#primaryimage"},"thumbnailUrl":"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png","datePublished":"2026-08-24T13:00:00+00:00","dateModified":"2026-08-24T14:59:06+00:00","description":"AWS patches SDK flaw that turned a region field into credential theft - SiliconANGLE","breadcrumb":{"@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#primaryimage","url":"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png","contentUrl":"https:\/\/images.siliconangle.com\/blogs.dir\/1\/files\/2026\/08\/piawsflaw.png"},{"@type":"BreadcrumbList","@id":"https:\/\/futurenews24.com\/index.php\/2026\/08\/24\/aws-patches-sdk-flaw-that-turned-a-region-field-into-credential-theft\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/futurenews24.com\/"},{"@type":"ListItem","position":2,"name":"AWS patches SDK flaw that turned a area subject into credential theft"}]},{"@type":"WebSite","@id":"https:\/\/futurenews24.com\/#website","url":"https:\/\/futurenews24.com\/","name":"Future News 24","description":"The Smart Hub for AI and Next-Gen Innovation","publisher":{"@id":"https:\/\/futurenews24.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/futurenews24.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/futurenews24.com\/#organization","name":"Future News 24","url":"https:\/\/futurenews24.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/futurenews24.com\/#\/schema\/logo\/image\/","url":"https:\/\/futurenews24.com\/wp-content\/uploads\/2026\/06\/fn24-favicon.png","contentUrl":"https:\/\/futurenews24.com\/wp-content\/uploads\/2026\/06\/fn24-favicon.png","width":250,"height":250,"caption":"Future News 24"},"image":{"@id":"https:\/\/futurenews24.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/futurenews24.com\/#\/schema\/person\/cecad1bde21cfc357cf70128144d6c83","name":"Future News 24","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d57f07142d73cb5503ab2446ea7bc9ef3d0a5ba378d64a6157692311e42bf097?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d57f07142d73cb5503ab2446ea7bc9ef3d0a5ba378d64a6157692311e42bf097?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d57f07142d73cb5503ab2446ea7bc9ef3d0a5ba378d64a6157692311e42bf097?s=96&d=mm&r=g","caption":"Future News 24"},"sameAs":["https:\/\/futurenews24.com"],"url":"https:\/\/futurenews24.com\/index.php\/author\/mridulpahuja20\/"}]}},"_links":{"self":[{"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/posts\/4175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/comments?post=4175"}],"version-history":[{"count":1,"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/posts\/4175\/revisions"}],"predecessor-version":[{"id":4176,"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/posts\/4175\/revisions\/4176"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/media\/4177"}],"wp:attachment":[{"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/media?parent=4175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/categories?post=4175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/futurenews24.com\/index.php\/wp-json\/wp\/v2\/tags?post=4175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}