Cloudanix Zero.

service

Amazon S3: security advisories, deprecations and releases

Object storage on AWS.

Get Amazon S3 alerts Free. No account. One email, and only when something touches your stack.
Items, 90 days
10
Critical
0
Last critical
none
This week
1

What your digest would have held this week

1 item from the last 7 days. Zero sends only the ones that touch your stack.

Security 2

  • HIGH Ruby on Rails Blog · 9 Oct 2026

    Stop setting public-read ACL on S3 uploads for public: true services

    Rails now skips ACLs for S3 uploads when the service is set to public: true. Use bucket policies instead to avoid failures on ACL-rejecting buckets.

  • MEDIUM Cloudanix Threat Intelligence · 2 Oct 2026

    Storm-2570

    Storm-2570 is a financially motivated ransomware affiliate tracked since April 2025, known for operating across multiple RaaS ecosystems including Qilin, DragonForce, Anubis, and BERT. The group maintains consistent tradecraft, using a common set of post-compromise tools for remote access (MeshAgent, Atera), lateral movement (PsExec, Impacket), and data exfiltration (s5cmd, Rclone) to attacker-controlled AWS S3 buckets. Their attack chain involves gaining…

Releases 7

News and tools 1

Only hear about Amazon S3 when it touches your stack

Tell Zero what you run. You get one email, and only on the days something above applies to you.

Get Amazon S3 alerts