🧰 AWS S3

The items that name it 5

• [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026
  articleas affected products2026-09-24
• Autonomous AI Agents Hack Online Retailers for $25 a Company
  writeupas affected products2026-09-22

  At a US beauty retailer, a leaked AWS access key granted write access to the CDN-backing bucket, used to serve the skimmer payload

• S3 Clones in the Neoclouds
  writeupas affected products2026-07-31

  Reference service; ~300 associated APIs; default S3 Block Public Access for new buckets; automatic encryption at rest since 2023; enforces TLS 1.2 or better; supports presigned URLs valid up to 7 days; has control plane and data plane logging (data plane off by default)

• elementalsouls/Claude-BugHunter
  repoas affected products2026-05-22

  public S3 misconfig covered under cloud misconfig + post-credential escalation

• Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure
  writeupas tools2026-03-23It is written here as AWS S3 (amazonaws.com).

  Hosting platform abused for phishing lure sites