Cloud Extortion Campaign Uses Exposed .env Files in 110,000 Domains to Acquire AWS Credentials
A sophisticated cloud extortion campaign used misconfigured AWS .env files to steal credentials and ransom cloud storage data.
Tag: AWS Secrets
AWS Vulnerabilities Revealed by Researchers at Black Hat Conference
The critical AWS vulnerabilities have been fixed but may still exist in other AWS and open source services, so the ...
Threat Actors Exploited Bitbucket Artifacts to Expose AWS Secrets in Plaintext
Researchers reported instances where Bitbucket artifacts in web applications exposed plaintext values of secret keys.
Q1 2026 Threat Reports
❮
❯