Threats·Cloud & SaaSBreakingAWS Lambda MicroVM State Isolation Flaw Enables Cross-Invocation STS Session Key Recovery in Custom Runtimes (CVE-2026-71215)AWS issues advisory CVE-2026-71215 for Lambda Custom Runtimes, addressing a Firecracker microVM memory reclamation flaw that exposed ephemeral STS tokens.CST Newsroom11 Oct 20268 min read
