BMW security lapse exposed sensitive company information, researcher finds

A misconfigured cloud storage server belonging to automotive giant BMW exposed sensitive company information, including private keys and internal data, TechCrunch has learned. Can Yoleri, a security researcher at threat intelligence company SOCRadar, told TechCrunch that he discovered the exposed BMW cloud storage server while routinely scanning the internet. Yoleri said the exposed Microsoft Azure-hosted storage server — also known as a "bucket" — in BMW's development environment was "accidentally configured to be public instead of private due to misconfiguration." Yoleri added that the storage bucket contained "script files that include Azure container access information, secret keys for accessing private…