All Tags
Case Study
3 items across 1 section
Blog Posts3
Anatomy of a Real AWS Breach: Capital One, 2019
How a misconfigured WAF, an unauthenticated metadata service, and an over-privileged IAM role combined to expose data on roughly 100 million people in the US and 6 million in Canada, and the specific checks that would have stopped it.
7 min read · 2026-09-22
Anatomy of a Real AWS Breach: Code Spaces, 2014
A single compromised AWS console login, no MFA, and a company was gone within 12 hours. The full story, and why "our backups are in AWS too" was the real failure.
6 min read · 2026-09-22
Anatomy of a Real AWS Breach: Imperva, 2019
A security company got breached through one exposed AWS API key on an internet-reachable instance. Even the people who build WAFs for a living can miss this.
5 min read · 2026-09-22
Need Help with AWS Security?
Our AWS security experts can help you implement best practices across all these topics.
Contact Us