CloudQuarry: Digging for secrets in public AMIs
Researchers found 500GB of credentials, private repos, and keys in public AWS AMIs, impacting various industries.
- from
- CI/CD Attacks
- added
- 2026-10-10
- likes
- 0
similar
-
Beyond S3: Exposed Resources on AWS duo.com
Public EBS, RDS, AMI and Elasticsearch clusters exposed to the internet.
-
whoAMI: A cloud image name confusion attack securitylabs.datadoghq.com
Dependency Confusion using AWS AMIs.
-
Publicly Exposed AWS Document DB Snapshots ramimac.me
Publicly exposed AWS DocumentDB snapshot of Cinemark Brazil revealed millions of customer records.
-
Toc Consulting hostingjournalist.com
The State of AWS Security (2026) - Examines the evolving AWS threat landscape, focusing on the transition from traditional misconfiguration exploits to sophisticated attacks involving autonomous agentic systems. Key findings reveal that 48 percent of cybersecurity professionals…
-
Employee Personal GitHub Repos Expose Internal Azure and Red Hat Secrets aquasec.com
Employee's personal GitHub repos expose internal Azure & Red Hat secrets.
-
Wiz wiz.io
Cloud Data Security Snapshot (2025) - Analyzes current cloud data security exposure trends. A significant finding reveals that 54% of cloud environments have exposed assets containing sensitive data, highlighting the critical need for improved access controls and vulnerability…
CI/CD Attacks › Techniques > Publicly Exposed Sensitive Data: “Researchers found 500GB of credentials, private repos, and keys in public AWS AMIs, impacting various industries.”