The Capital One breach is more complicated than it looks – The Verge
The technical details of the breach make it more complicated still. What Thompson did was only possible because Capital One had misconfigured its Amazon server. Thompson had worked at Amazon years earlier, so she’s been described by some as an “insider threat.” But sniffing out this kind of misconfiguration is a common pastime for security researchers.
