Researchers at Rapid7 say they were easily able to look into Amazon Simple Storage Service buckets, estimating that about 17% of them can have their contents exploited or stolen. "The security risk from a public bucket is simple. A list of files and the files themselves -- if available for download -- can reveal sensitive information," Rapid7's Will Vandevanter wrote in a blog post. "The worst-case scenario is that a bucket has been marked as 'public' exposes a list of sensitive files, and no access controls have been placed on those files."

Full Story:

Related Summaries