BMW security error left valuable private company data exposed online

Automotive giant BMW kept a cloud storage server hosting sensitive data such as private keys and internal information unprotected on the internet, and available to anyone who knew exactly where to look. Security researcher Can Yoleri approached TechCrunch claiming to have found a Microsoft Azure bucket that was misconfigured, and thus set to be public instead of private. Yoleri explained that the bucket held "script files that include Azure container access information, secret keys for accessing private bucket addresses, and details about other cloud services." He also found private keys for BMW's cloud services in China, Europe, and the US….