BLACK HAT EUROPE 2021 — London — All it took was a space between characters and a few random letters, and Web researcher Daniel Thatcher was able to modify the HTTP header sent to Amazon API Gateway.

Breach discovery: Braintrust detected unauthorized AWS account access on May 4 after suspicious activity reports and quickly informed customers. Potential impact: Attackers may have obtained API keys ...