TruffleHog AWS Analyze reduces remediation time on leaked AWS credentials
Truffle Security launched TruffleHog AWS Analyze, which maps leaked AWS keys' permissions and role assumptions; research found 88% of 64,024 leaked keys still active.
Truffle Security announced TruffleHog AWS Analyze, a TruffleHog Enterprise feature that enriches leaked AWS credentials with identity, effective permissions, and role-assumption context to help teams assess blast radius and prioritize remediation, extending earlier coverage of SaaS and Google Cloud to AWS. Truffle Security research on 64,024 unique leaked AWS keys found 88% still active, a median exposure of five years, only 14% rotated, 84% with full administrator access, and 1 in 6 being root keys, including 929 keys AWS had flagged via its compromised-key quarantine policy that still authenticated. A scan of 7.6 petabytes of public AI training data on Hugging Face found 3,343 live AWS keys, over 900 of which could list S3 buckets holding at least 51.7 TB of private data.
- New feature maps leaked AWS keys to identities, effective permissions, and assumable roles
- Research found 88% of 64,024 leaked AWS keys still active, with a median exposure of five years
- 84% of closely examined keys had full admin access; 1 in 6 was a root key
- 929 keys flagged by AWS quarantine policy remained unremediated
- 3,343 live keys found in Hugging Face public AI training data, exposing 51.7+ TB of private S3 data
- Organizations
- Truffle SecurityAWSHugging Face
From the original article
3 min read at helpnetsecurity.comTruffle Security announced TruffleHog AWS Analyze, a new addition to TruffleHog Enterprise. TruffleHog AWS Analyze enriches found AWS credentials to highlight permissions and access levels, so a security team can assess the risk and prioritize its response.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.