HashiCorp is successfully targeting the entire infrastructure life cycle, with strong integrations between Terraform and its other products.

Attackers can exploit this by publishing a malicious AMI with a matching name and newer timestamp, tricking automated infrastructure-as-Code (IaC) tools like Terraform into selecting a compromised ...