Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'

Abandoned AWS S3 buckets could be reused to hijack the global software supply chain in an attack that would make Russia's ...
Network World

Ransomware gangs seize a new hostage: your AWS S3 buckets

Attackers are moving beyond on-prem systems and now using AWS’s own encryption and key management features to lock organizations out of their cloud data. Ransomware operators are shifting their focus ...
CSOonline

Abandoned AWS S3 buckets open door to remote code execution, supply-chain compromises

Attackers re-register abandoned AWS S3 buckets filled with malicious files that are executed by applications looking for these buckets. Code references to nonexistent cloud assets continue to pose ...
Dark Reading

AWS's Predictable Bucket Names Make Accounts Easier to Crack

The Amazon Web Services Cloud Development Kit (CDK), a popular open source tool, allows cyber teams to conveniently build software-defined cloud infrastructure with widely used programming languages, ...
Ars Technica

AWS S3 storage bucket with unlucky name nearly cost developer $1,300

If you’re using Amazon Web Services and your S3 storage bucket can be reached from the open web, you’d do well not to pick a generic name for that space. Avoid “example,” skip “change_me,” don’t even ...
Threat Post

Experts Warn Too Often AWS S3 Buckets Are Misconfigured, Leak Data

An analysis of Amazon Web Services storage containers reveals troubling trend of misconfigured S3 buckets that leak data. Reasons why this keeps on happening vary. But, Detectify Labs believes many ...