Cloud storage containers (S3 buckets, Azure blobs, Google storage) left open to the public or without authentication.
Why it matters:
- Massive data breaches happen this way — often by accident.
- Attackers continuously scan for exposed buckets.
Pro tip: Never set storage buckets to “public” unless absolutely necessary; use access logs and block all public access by default.
Synonyms:
S3 Bucket Exposure