S3 bucket takeover discovered in DNS: the Bime case

A researcher identified an S3 bucket takeover vulnerability via DNS CNAME in 2016.

Published 13sem1 sourceNotable

≈ 14sSpeed

The fact

The vulnerability at a2.bime.io pointed to a deleted bucket, creating an exploitable security gap.

Click the link to read an article on the topic:

Explore this topic

Exposition potentielle de données hébergées dans le bucket

Auto-synthesis from 1 media source · identified on April 25, 2026