Researchers Uncover Thousands of Leaked AWS Keys
Truffle Security researchers discovered more than 9,000 publicly accessible and active AWS key pairs, creating credential exposure and account-takeover risks.
Truffle Security reported finding over 9,000 AWS key pairs that are simultaneously publicly accessible and active. Anyone retrieving such keys could potentially access the associated cloud resources without authentication. The finding underscores widespread secrets-hygiene failures in cloud environments and the risks of long-lived static credentials.
- Over 9,000 active AWS key pairs found publicly accessible
- Exposed credentials can enable unauthenticated access to cloud resources
- Highlights systemic secrets-management and exposure hygiene problems
- Vendors
- Truffle SecurityAWS
- Products
- AWS
- Organizations
- Truffle Security
From the original article
Truffle Security says it found over 9000 publicly accessible and active AWS key pairs
infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.