Wiz Report Finds 47% of Companies Expose a Cloud Database or Storage Bucket

Summary
Wiz says its scans found that 47% of companies had at least one internet-exposed database or storage bucket; a bucket with a guessable name could be discovered and accessed in under 13 hours.
Key points
- Wiz says its report is based on scans of more than 200,000 cloud accounts, including environments at over 30% of Fortune 100 companies.
- The report says 47% of companies had at least one database or storage bucket publicly exposed to the internet.
- Wiz says an attacker could discover and access an exposed bucket with a guessable name in less than 13 hours.
- The article reports that 57% of companies use more than one cloud platform.
- It reports increases in the number of possible API calls over the past year: 15% in AWS, 20% in Azure, and 45% in GCP.
Article Details
- Event Type
- Cloud security report on risks and adoption trends
- Impact
- The report describes widespread cloud exposure risks: 47% of companies scanned had at least one database or storage bucket publicly exposed, and an exposed bucket with a guessable name could be discovered and accessed in under 13 hours. It also notes growing attack surfaces from expanding cloud APIs and the security challenges of multi-cloud environments.
Products
AWSMany new capabilities were introduced, with the number of possible API calls increasing by 15% in AWS, 20% in Azure, and 45% in GCP.AzureMany new capabilities were introduced, with the number of possible API calls increasing by 15% in AWS, 20% in Azure, and 45% in GCP.GCPMany new capabilities were introduced, with the number of possible API calls increasing by 15% in AWS, 20% in Azure, and 45% in GCP.
