Article - ThreatCluster

Back Ciberseguridadlatam

Ciberseguridadlatam •Redacción CSL • August 23, 2026

# Más de 9.300 claves de AWS expuestas públicamente siguen activas cuatro años después Credenciales con control total sobre cuentas corporativas permanecen válidas desde 2022 sin que las organizaciones afectadas las hayan revocado. Entre agosto de 2022 y agosto de 2026, más de 9.300 claves de acceso de Amazon Web Services quedaron expuestas públicamente y […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Over 9,300 AWS Keys Exposed for Four Years Remain Active More than 9,300 Amazon Web Services (AWS) access keys have been publicly exposed since August 2022 and remain active as of August 2026. These keys provide full control over corporate accounts, yet the affected organizations have not revoked them. The prolonged exposure poses significant risks, as these credentials could be exploited by malicious actors to gain unauthorized access to sensitive data and systems. The lack of action from organizations to secure their accounts raises concerns about cybersecurity practices and risk management. The incident highlights the importance of regular audits and the revocation of unused or exposed credentials to prevent potential breaches. 2 sources 66

Extracted Entities

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)