[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzAQthAwA___h5zGgcbRscD_7_8ph6d7d0SWbsmKffXQ":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"a82ae907-6daa-413f-bba9-f1b607b1ce51","Hundreds of leaked AWS keys give full control over corporate accounts","hundreds-of-leaked-aws-keys-give-full-control-over-corporate-accounts-5af2f8","More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. [...]","A report by Truffle Security reveals over 9,300 AWS access keys, many with administrator privileges, have been publicly exposed and remain active. These keys, found in code repositories and other public sources, offer attackers full control over company AWS accounts, enabling data theft, server compromise, and cryptomining. Hugging Face was identified as a major source of these exposed credentials.","Thousands of leaked AWS access keys provide full control over corporate accounts.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhundreds-of-leaked-aws-keys-give-full-control-over-corporate-accounts\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F21\u002Fawskey.jpg","2026-08-21T15:55:15+00:00","2026-08-21T16:00:14.380422+00:00",9,[17,20,23,25,27],{"name":18,"type":19},"AWS","product",{"name":21,"type":22},"Amazon","vendor",{"name":24,"type":22},"Truffle Security",{"name":26,"type":19},"Hugging Face",{"name":28,"type":29},"IAM","technology","c70f3a41-2f0c-4608-870d-b8cbcd8be076",{"id":30,"icon":32,"name":33,"slug":34},null,"Cloud Security","cloud-security",[36,41,46,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":47},{"id":30,"icon":32,"name":33,"slug":34},{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,18],{"controls":56,"vendors":141},[57,86,115],{"slug":58,"name":59,"problem":60,"products":61},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":87,"name":88,"problem":89,"products":90},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":116,"name":117,"problem":118,"products":119},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[120,125,133],{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":121,"product_name":122,"url":123,"description":124},"cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":159},"9300-leaked-aws-keys-expose-corporate-accounts-to-full-takeover","9,300+ Leaked AWS Keys Expose Corporate Accounts to Full Takeover","Developers inadvertently committed AWS access keys — many with administrator-level privileges — into public code repositories and datasets, where they remain active and exploitable. The core failure is a combination of poor secrets hygiene, lack of pre-commit scanning, and inadequate credential lifecycle management. Because these keys were never rotated or revoked after exposure, attackers retain persistent, full-control access to corporate AWS environments. This matters enormously: a single leaked admin key can lead to complete cloud account compromise, mass data exfiltration, ransomware deployment, or unauthorized compute abuse like cryptomining. The involvement of a major AI platform like Hugging Face highlights that even trusted, widely-used services can become unintentional vectors for credential leakage at scale.",[147,148,149,150,151,152,153,154,155,156,157,158],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 8: Audit Log Management","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 SI-12: Information Management and Retention","NIST CSF ID.AM-3: Organizational communication and data flows are mapped","GDPR Article 32: Security of Processing (for EU data stored in exposed accounts)","AWS Well-Architected Framework: Security Pillar — Identity and Access Management","OWASP Top 10: A02:2021 Cryptographic Failures \u002F Sensitive Data Exposure",{}]