> TritonInfoSec News
Home / Aug 22, 2026 / Story
0
#7 BleepingComputer general August 21, 2026 at 15:55 UTC

Hundreds of leaked AWS keys give full control over corporate accounts

By Bill Toulas

AI Summary

A study found more than 9,300 Amazon Web Services access keys publicly exposed between August 2022 and August 2026 that remain active and valid, giving attackers full control over the associated corporate AWS accounts. The ongoing exposure represents a systemic cloud credential hygiene failure with direct, exploitable impact across potentially thousands of organizations.

Read full article → https://www.bleepingcomputer.com/news/security/hun…

Relevance score: 84.0/100

# More from August 22

  1. 1
    Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution The Hacker News
  2. 2
    Microsoft warns of max severity Entra ID flaw exploited in attacks BleepingComputer
  3. 3
    GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure The Hacker News
  4. 4
    Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot The Hacker News
  5. 5
    Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 The Hacker News
  6. 6
    CISA orders feds to patch actively exploited TrueConf Server flaws BleepingComputer
  7. 8
    Rust Supply Chain Attack Linked to North Korean Hackers SecurityWeek
  8. 9
    Critical Zimbra RCE flaw now actively exploited in attacks BleepingComputer
  9. 10
    Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices The Hacker News