HUNDREDS OF LEAKED AWS KEYS GIVE FULL CONTROL OVER CORPORATE ACCOUNTS

Summary from the TLDR InfoSec newsletter

Truffle Security has been tracking AWS access key exposure for four years and reports that 9,300 of the access keys that they've discovered and tracked remain active. Of these 9,300 keys, 817 of the keys were linked to companies, with 526 of those being root keys. Truffle Security's testing was limited to read-only metadata, and it has notified affected customers.