Someone discovered an improperly configured Microsoft Azure blob containing sensitive information of investment fund members. The details include names, addresses, number of shares, and even passport scans and online banking PINs. The fund’s IT team appears to be lacking the knowledge of how cloud systems work and the risks that arise from misconfigurations. Sometimes, to []

API abuse possibilities in AWS enable actors to perform account enumeration. This is not as critical for AWS security as it is for the potentially exposed organization. The hacking attempts are stealthy, but there are ways to mitigate the risk effectively. Researchers of the ‘Unit 42’ team have discovered a way to abuse 22 APIs []