CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Risky Bulletin: AWS kills bucketsquatting

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 220

As cited

Copy frozen at (site build).

cloud saas

Risky Bulletin: AWS kills bucketsquatting

Amazon Web Services introduced a security feature to mitigate S3 bucket namesquatting attacks, where attackers register expired or deleted buckets with predictable names to intercept traffic and collect sensitive data. The technique, documented since 2019, exploits naming conventions to target organizations whose traffic still routes to abandoned buckets.

Why it matters: AWS customers using S3 buckets face exposure to data interception if traffic continues flowing to expired or deleted buckets; enabling this feature reduces the window for attackers to claim and abuse namesquatted buckets.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

Risky Bulletin: AWS kills bucketsquatting

Amazon Web Services introduced a security feature to mitigate S3 bucket namesquatting attacks, where attackers register expired or deleted buckets with predictable names to intercept traffic and collect sensitive data. The technique, documented since 2019, exploits naming conventions to target organizations whose traffic still routes to abandoned buckets.

Why it matters: AWS customers using S3 buckets face exposure to data interception if traffic continues flowing to expired or deleted buckets; enabling this feature reduces the window for attackers to claim and abuse namesquatted buckets.

VendorsAmazon Web Services
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary