Critical AWS Vulnerabilities Allow S3 Attack Bonanza

Researchers at Aqua Security discovered the “Shadow Resource” attack vector, and the “Bucket Monopoly” problem, where threat actors can guess the name of S3 buckets based on their public account IDs.