Another large company "caught" on the inability or unwillingness to protect their cloud storage. Researchers at Kromtech Security managed to access the AWS S3 server, where a large US telecommunications company Verizon stores the data it uses and its Distributed Vision Service (DVS) software, on the basis of which it operates.
As the researchers explained, DVS is a middleware and a centralized environment for all applications used by Verizon Wireless (a subsidiary of Verizon Communications) to obtain and update billing data. "Despite the fact that the leak did not affect the data of our customers, we saw files and data with the names" VZ Confidential "and" Verizon Confidential ", containing usernames and passwords. These credentials can easily provide access to other parts of Verizon's internal network and infrastructure, "researchers said..
Experts also managed to gain access to a number of messages in Outlook and server data for B2B payments. They contacted Verizon's representatives and the company closed access to its AWS S3 server. It seems that the cause of the problem was the human factor - someone from the company's employees simply forgot to disable the public access option.
Billing in telecommunications is a complex of processes and solutions at communication enterprises responsible for collecting information on the use of telecommunications services, their tariffication, invoicing subscribers, processing payments. Billing system - application software supporting business processes billing. Billing is an essential component of any commercial operator's activity.