'Damn Vulnerable' Training Apps Leave Vendors' Clouds Exposed

Pentera researcher Noam Yaffe found thousands of deliberately vulnerable training web applications exposed on the public internet; 1,926 were accessible and 974 ran on major cloud providers. At least 165 had IAM roles attached (109 over‑permissioned), enabling RCE chains that accessed cloud metadata and temporary credentials — in some cases yielding AdministratorAccess and full cloud compromise. Artifacts show active abusive use (e.g., XMRig cryptomining) and multiple major security vendors were affected, highlighting a systemic risk from insecure training apps in production environments.