New research has revealed that abandoned cloud storage buckets pose a significant threat to Internet security, despite being largely overlooked.<\/span><\/p>\n The risks arise when malicious actors discover and re-register these neglected digital repositories under their original name, and then use them to deliver malware or carry out other malicious actions on anyone still requesting files from them.<\/span><\/p>\n The threat is far from theoretical, and the weakness is in fact incredibly easy to exploit, according to researchers from watchTowr who recently conducted a follow-up study on the risks tied to abandoned cloud storage buckets.<\/span><\/p>\n The findings come as a response to previous research conducted by watchTowr last year on the risks associated with abandoned cloud storage buckets.<\/span><\/p>\n Amazon Web Services (AWS) has provided guidance to customers on best cloud bucket practices, including the use of unique identifiers when creating bucket names to prevent unintended reuse.<\/span><\/p>\n AWS has also encouraged customers to use its bucket ownership condition feature, specifically designed to prevent unintended reuse of bucket names.<\/span><\/p>\n In addition, AWS has requested that researchers engage with its security team before conducting research involving the company’s services.<\/span><\/p>\nA Far From Theoretical Threat<\/h2>\n
AWS Response<\/h3>\n