Amazon Web Services (AWS) Managed Workflows for Apache Airflow (MWAA) carried a flaw which allowed threat actors to hijack people’s sessions and execute malicious code on underlying instances ...

"By contrast, partners and customers that don’t patch their operating systems on ... single-digit percentage" of instances across the Amazon EC2 fleet are already protected.