An extortion group called Icarus reportedly broke into Klue’s systems using a credential issued back in 2022, exposing keys to customers’ cloud services for extortion.
Our analysis
This isn’t a zero-day story — it’s a governance one. A four-year-old credential still working is the real headline, and stale, over-privileged keys remain the least glamorous, most reliable way cloud environments fall. For Cyprus firms in the cloud, this is entirely preventable and squarely within your control — identity is your perimeter now.
What you should do
- Rotate credentials on a schedule and replace long-lived static keys with short-lived tokens.
- Enforce least privilege and review IAM for unused, over-scoped access.
- Alert on anomalous use of old credentials and impossible-travel sign-ins.
- Run periodic cloud reviews and assumed-breach tests.
How CyprusPentest helps: our cloud configuration review and AWS penetration testing map the paths a stale key could take, and an assumed breach assessment shows the blast radius.
Source: TechCrunch.