Ransomnews counts 484,142 listable cloud buckets holding 18 billion files
An October 7 snapshot found 321,058 credential and key files without opening any objects, and the authors say many buckets are public on purpose.
64
Product
Amazon S3
- Mentions · 7d2
- Mentions · 30d3
- All mentions7
- First seenSep 2, 2026
- Last mentioned1d ago
Timeline
7 articles · newest firstResearchers chain Cloudflare image flaws into a CSP-bypass XSS
A public write-up shows script execution via /cdn-cgi/image/ using an SVG namespace bug and a Chromium cache quirk.
66
How to keep AI agents within their permissions
Token Security explains how to stop AI agents from using credentials outside their assigned tasks.
44
CVE-2026-81862: Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logs
Apache Airflow Teradata provider before 3.7.0 embeds cloud storage credentials in SQL and logs (CVE-2026-81862).
46
S3 Is the Future, S3 Is the Past
Amazon S3 standard storage remains $0.023 per GB-month, unchanged since December 2016.
6
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
ANY.RUN linked 601 RMM-tool phishing cases across 46 countries, with the US the top target at 45% of observed activity.
55
Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware
Kaspersky reports Iran-linked Mirage Kitten delivers new NodeRabbit and PollCat malware to fintech and aviation targets via fake LinkedIn coding assessments.
74
Related CVEs
by mentions- Cloud credential leak in Apache Airflow Teradata provider
Appears with
- Amazonvendor · 3
- Googlevendor · 2
- Google Cloud Storageproduct · 2
- Amazon Web Servicesvendor · 2
- Microsoftvendor · 2
- Teradatavendor · 1
- organizations in Afghanistanvictim · 1
- MiniFastproduct · 1
- Apache Airflowproduct · 1
- DigitalOcean Spacesproduct · 1
- Netlifyvendor · 1
- Apache Airflow Teradata Providerproduct · 1
- DigitalOceanvendor · 1
- Alibabavendor · 1
- Cloudflare Image Transformationsproduct · 1
- Alibaba OSSproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.