Dark Reading

Critical AWS Vulnerabilities Allow S3 Attack Bonanza

BLACK HAT USA – Las Vegas – Thursday, Aug. 8 – Six critical vulnerabilities in Amazon Web Services (AWS) could have allowed threat actors to target organizations with remote code execution (RCE), ...
SiliconANGLE

AWS expands Amazon S3 with features to support Apache Iceberg and metadata management

Amazon Web Services Inc. announced at its re:Invent conference today significant updates to its Amazon Simple Storage Service that are designed to make S3 the first cloud object store with fully ...
Bleeping Computer

How attackers abuse S3 Bucket Namesquatting — And How to Stop Them

With the sheer amount of data and users leveraging AWS, it’s easy for misconfigurations to slip through the cracks. One commonly overlooked area is the naming of S3 buckets. AWS S3 bucket names are ...
Ars Technica

AWS S3 storage bucket with unlucky name nearly cost developer $1,300

If you’re using Amazon Web Services and your S3 storage bucket can be reached from the open web, you’d do well not to pick a generic name for that space. Avoid “example,” skip “change_me,” don’t even ...