来自MSN

Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds ...

Abandoned AWS S3 buckets could be reused to hijack the global software supply chain in an attack that would make Russia's "SolarWinds adventures look amateurish and insignificant," watchTowr Labs ...
Forbes

Safeguarding S3 Buckets: Mitigating CORS Misconfigurations

Amazon Simple Storage Service (S3) is a scalable object storage service provided by AWS that enables users to store and retrieve data from anywhere on the web. It is widely used for a variety of ...
Business Insider

Lightspin Research Team Discovers Cross-Account Attack Path Leveraging Dangerous S3 Bucket ...

Hackers can achieve public write access to write files to protected S3 buckets and store data at a victim's expense TEL AVIV, Israel, June 3, 2021 /PRNewswire/ -- Lightspin, a pioneer in contextual ...
Dark Reading

Abandoned AWS Cloud Storage: A Major Cyberattack Vector

Abandoned cloud storage buckets present a major, but largely overlooked, threat to Internet security, new research has shown. The risks arise when bad actors discover and re-register these neglected ...
Bleeping Computer

2% of Amazon S3 Public Buckets Aren't Write-Protected, Exposed to Ransom Attacks

New research published on Monday reveals that 5.8% of all Amazon S3 buckets are publicly readable, while 2% are publicly writeable —with the latter allowing anyone to add, edit, or delete data, and ...
Bleeping Computer

Amazon S3 will now encrypt all new data with AES-256 by default

Amazon Simple Storage Service (S3) will now automatically encrypt all new objects added on buckets on the server side, using AES-256 by default. While the server-side encryption system has been ...