Hundreds of leaked AWS keys give full control over corporate accounts
4 Articles
4 Articles
Researchers found 768 leaked AWS keys that still work, and the containment policy leaves plenty possible
Truffle Security found 768 leaked AWS keys granting full control of corporate accounts, including 526 root keys, with 88% of tested credentials still active. AWS applies a quarantine policy to keys it detects as leaked, which still permits a long list of damaging actions. Researchers have found 768 leaked Amazon Web Services keys that still […] This story continues at The Next Web
A Truffle Security investigation identified 768 leaked AWS keys that still allowed access to corporate accounts, while an analysis of the provider's quarantine policy warns of potentially destructive actions that might remain available. *** Truffle Security collected 431,875 AWS secrets and verified 10,616 complete credentials, of which 88% were still authenticated. Among the exposures there were 526 root keys, the highest level of privilege for…
AWS Security makes an inscrutable choice
Quarantining leaked credentials is not good enough This article has been indexed from www.theregister.com – Articles Read the original article: AWS Security makes an inscrutable choice The post AWS Security makes an inscrutable choice appeared first on IT Security News.
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
