My Terrible Roommates - Discovering the FlowFixation Vulnerability and the Risks of Sharing a Cloud Domain

This talk examines risks created when cloud customers share parent domains, including same-site attacks and the Public Suffix List as a guardrail. It also details FlowFixation, a vulnerability in AWS Managed Workflows for Apache Airflow that could enable session hijacking and remote code execution.