Researchers from Truffle Security found 64,024 live AWS access key pairs and root credentials exposed across public repositories, AI datasets, container images, and CI logs, affecting more than 9,900 AWS accounts worldwide. The leaked keys could grant full administrative control and cause major cloud abuse and unexpected spending, including hundreds of thousands of dollars in charges. #AWS #TruffleSecurity #HuggingFace #IAM #rootcredentials
Keypoints
- 64,024 live AWS access key pairs and root credentials were found in public sources.
- More than 9,900 AWS accounts were affected, including 768 corporate environments.
- Many leaked keys had administrative privileges, and 130 root keys controlled organization management accounts.
- Public Git commits, Docker images, package registries, CI logs, and Hugging Face datasets were major exposure sources.
- Organizations should revoke root keys, rotate credentials, set billing alerts, and watch for AWS quarantine tags.
Read More: https://securityonline.info/leaked-corporate-aws-keys/