Accenture
The Cyber Risk Team at UpGuard revealed that Accenture didn`t properly protect no fewer than 4 AWS S3 storage buckets, as a result, they are open for a public access. This gap undermines security of authentication credentials, secret API data, digital certificates, decryption keys, information about the user, and other types of information. UpGuard stressed that this problem could cause a vast financial loss, because now hackers have opportunity to exploit the keys in order to disguise themselves as Accenture employees and to steal different sensitive data they need.
Viaco
A large Viacom company also left its data insecure on a AWS S3 cloud storage bucket, which is available for a public download. This allows attackers to take control over its IT infrastructure and or Internet availability. More important is that secret cloud keys of the company are also at risk, so hackers could keep an eye on its cloud-based servers. Continue reading →