Nearly 800 leaked AWS keys still grant full account control

Source: The Next Web

Truffle Security found 768 exposed AWS credentials still active, with over two-thirds being root keys. Most organizations don't revoke compromised keys at scale even after public disclosure. AWS's containment policies allow leaked credentials to persist, shifting responsibility to individual account holders to notice and act—a lag that attackers exploit.