More than 9,300 AWS access keys that were made public from August 2022 to August 2026 are still active, says a recent report from Bleeping Computer. Truffle Security has watched this happen for four years. They found that 817 exposed keys were tied to companies, and 526 of those were AWS …

US Bank is looking into LockBit’s claims about a breach and stolen data. The ransomware group says they will share the supposed stolen files on September 3 if a secret ransom is not paid. Lee Henderson, US Bank vice president of public affairs, confirmed that the company is aware of the …

Central Asian government agencies have been attacked in a cyber spy operation that used a small but different range of remote access tools. The action called SilkParasite used fake government documents and trusted Windows programs to secretly install malware on victims’ computers. The campaign seems to be aimed at intelligence gathering …