More than 9,300 AWS access keys exposed over a four-year period are still active, with hundreds tied to companies, root accounts, and AdministratorAccess users. Truffle Security warns that some of these leaked credentials could give attackers full control of AWS environments, including data theft, account takeover, and cryptomining, with Hugging Face being the largest source of exposed keys. #AWS #HuggingFace #TruffleSecurity
Keypoints
- More than 9,300 publicly exposed AWS access keys are still valid.
- 817 exposed keys were linked to companies, and 526 were AWS root keys.
- 242 keys belonged to IAM users with AdministratorAccess permissions.
- Hugging Face accounted for 8,482 unique leaked AWS key exposures.
- Truffle Security recommends deleting root keys, rotating exposed keys, and setting budget alerts.