BMW security lapse exposes sensitive company information, TechCrunch reports

A misconfigured cloud storage server belonging to automotive giant BMW (BMWYY) exposed sensitive company information, including private keys and internal data, TechCrunch’s Carly Page reports. Can Yoleri, a security researcher at threat intelligence company SOCRadar, told TechCrunch that he discovered the exposed BMW cloud storage server while routinely scanning the internet. Yoleri said the exposed Microsoft (MSFT) Azure-hosted storage server – also known as a “bucket” – in BMW’s development environment was “accidentally configured to be public instead of private due to misconfiguration.”