1min snip

Risky Business cover image

Risky Business #759 – Why Iran's hack and leak will amount to naught

Risky Business

NOTE

Beware of Shadow Resources in AWS

The research highlights vulnerabilities in AWS accounts stemming from unexpected S3 bucket creation, which can manipulate the behavior of tools that rely on these buckets for storage. AWS services like CloudFormation generate S3 buckets that are not predictable, allowing potential attackers to exploit this unpredictability if they can determine or create bucket names. This manipulation can affect how trusted processes handle data, similar to issues with predictable file names in Unix systems, leading to security breaches through shadow resources.

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode