55
30
42
30
30
42
60
55
42
30
30
30
30
30
30
30
30
55
55
30
30
30
42
60
30
55
30
30
55
55
60
TruffleHog AWS Analyze reduces remediation time on leaked AWS credentials
Truffle Security launched TruffleHog AWS Analyze, which maps leaked AWS keys' permissions and role assumptions; research found 88% of 64,024 leaked keys still active.
Truffle Security announced TruffleHog AWS Analyze, a TruffleHog Enterprise feature that enriches leaked AWS credentials with identity, effective permissions, and role-assumption context to help teams assess blast radius and prioritize remediation, extending earlier coverage of SaaS and Google Cloud to AWS. Truffle Security research on 64,024 unique leaked AWS keys found 88% still active, a median exposure of five years, only 14% rotated, 84% with full administrator access, and 1 in 6 being root keys, including 929 keys AWS had flagged via its compromised-key quarantine policy that still authenticated. A scan of 7.6 petabytes of public AI training data on Hugging Face found 3,343 live AWS keys, over 900 of which could list S3 buckets holding at least 51.7 TB of private data.
28
30
30
30
30
60
30
55
30