Global Namespace Flaw Lets Attackers Hijack Cloud Buckets and Steal Data
Researchers found that the universal uniqueness of bucket names across AWS, GCP and Azure lets an attacker delete a victim’s bucket and recreate it under their own account, silently rerouting logs and other streams. The flaw could exfiltrate sensitive telemetry without detection, forcing organizations to lock down bucket ownership and monitor deletions.