#OSS

An OSS Bucket Set to 'Private' Isn't Always Private

Public bucket exposure is one of the oldest cloud misconfiguration classes there is. Testing it directly on OSS showed exactly how a bucket set to private can still leak individual objects.

8 Apr 2026 · 10 min read