AWS fixes 1-click account takeover flaw exposing cloud services to XSS risk | Heykuki News