InfoSecBulletin Cybersecurity for mankind
Billions of files, including documents, source code, and backups, are leaking because of misconfigured cloud storage. Cyble, a cybersecurity company focused on dark web monitoring and threat intelligence, reports its vulnerability search tool has found over 660,000 exposed buckets and 200 billion leaking files from seven major cloud providers.
Filtering the data for three sensitive types—credentials, source code, and confidential files—revealed millions of compromised files.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“Filtering for ‘source code’ and the Go language, for example, yielded 5.6 million results,” the firm said. “Filtering for env credentials returned 110,000 results. And a search for confidential files returned more than 1.6 million results,” a Cyble researcher said.
The number of exposed cloud storage buckets has increased by over 30% since August of last year, when Cyble’s analysis found more than 500,000 exposed buckets.
The security firm warns that misconfigurations often lead to data leaks from publicly accessible storage buckets.
“Managing access to cloud storage buckets can be challenging even for the largest organizations, and misconfigured cloud buckets are all too common. While cloud storage is typically private by default, it can quickly get complicated when you start sharing objects or resources,” the report reads.
