New 'Bucket Hijacking' Attack Reroutes Cloud Data Streams Across Major Providers
Researchers have uncovered a critical cloud storage attack technique, dubbed 'bucket hijacking,' that allows threat actors to silently redirect an organization's active cloud data streams, including audit logs and telemetry, to attacker-controlled external storage buckets. This vulnerability has been confirmed to affect Google Cloud, Amazon Web Services (AWS), and Microsoft Azure, exploiting a fundamental architectural flaw in the global uniqueness of cloud storage bucket names.
Want more?
Open NewsSnap.ai for the full app experience, including audio, personalization, and more news tools.