An extortion group called Icarus reportedly broke into Klue’s systems using a credential issued back in 2022, exposing keys to customers’ cloud services for extortion.
Our analysis
This isn’t a zero-day story — it’s a governance one. A four-year-old credential still working is the real headline, and stale, over-privileged keys remain the least glamorous, most reliable way cloud environments fall. For Cyprus firms in the cloud, this is entirely preventable and squarely within your control — identity is your perimeter now.
What you should do
- Rotate credentials on a schedule and replace long-lived static keys with short-lived tokens.
- Enforce least privilege and review IAM for unused, over-scoped access.
- Alert on anomalous use of old credentials and impossible-travel sign-ins.
- Run periodic cloud reviews and assumed-breach tests.
How CyprusPentest helps: our cloud configuration review and AWS penetration testing map the paths a stale key could take, and an assumed breach assessment shows the blast radius.
Source: TechCrunch.
How one stale credential becomes total access
Cloud breaches rarely start with a zero-day — they start with a credential that was never rotated: leaked in an old breach, committed to a repo, or left in a config. Over-broad IAM permissions then let the attacker move from one identity to the entire account.
The lesson is that identity, not the network perimeter, is the real boundary in the cloud. Least-privilege and ruthless credential rotation are what shrink the blast radius when a key inevitably leaks.
What this means for Cyprus businesses
A years-old credential breaching a cloud provider is a stark lesson: stale, un-rotated keys are a standing invitation. For Cyprus businesses in the cloud, one leaked credential often equals full account access — and a GDPR-reportable breach.
How to reduce your exposure
- Rotate credentials and keys on a schedule; kill long-lived static secrets.
- Apply least-privilege IAM and remove unused roles.
- Enforce MFA everywhere and monitor for anomalous credential use.
- Audit your cloud configuration against real attack paths.
Find over-permissive access with cloud configuration review and identity & access testing — get a fixed-price quote for your Cyprus business.