Nearly 20 Billion Files Exposed Due to Misconfigured Cloud Buckets

Researchers from Mysterium VPN reported that nearly 20 billion files have been exposed due to misconfigured cloud storage buckets across major providers like Amazon S3, Google Cloud, and Azure. The exposed files include 685,047 credential files and nearly 1 million database dumps, all accessible without authentication. The issue stems from user misconfigurations rather than vulnerabilities in the cloud platforms themselves. Amazon S3 accounts for over two-thirds of the exposed storage. The interconnectedness of these files increases the risk of complete data breaches from a single misconfigured bucket. Recommendations for mitigation include defaulting to private settings, avoiding the storage of sensitive data in object storage, and implementing regular vulnerability scans. Users are advised to use unique passwords and enable multi-factor authentication. The report emphasizes the urgent need for better security practices among cloud storage users.

Key Points: • Nearly 20 billion files exposed due to misconfigured cloud storage buckets. • Exposed data includes 685K credential files and nearly 1M database dumps. • Amazon S3 accounts for over two-thirds of the exposed storage.