Over 9,300 AWS Access Keys Publicly Exposed, Posing Severe Security Risks

Over 9,300 Amazon Web Services (AWS) access keys were publicly exposed between August 2022 and August 2026, with many remaining active and valid. These leaked keys grant full control over corporate AWS accounts, posing a severe security risk. The exposure was identified through scans of public repositories and misconfigured cloud storage, though no specific threat actor or attack vector was named. The affected keys were not linked to any disclosed Common Vulnerabilities and Exposures (CVE) identifiers. The impact includes potential unauthorized access, data breaches, and resource exploitation within compromised accounts.