Amazon Web Services (AWS) is asking those that write code and use GitHub to go back and check their work to make sure they didn't forget to remove login credentials. The warning comes as news is ...

According to UpGuard, among the data exposed was passwords stored in plain text, AWS secret keys for Pocket iNet employees, network diagrams, configuration settings, and inventory lists.

Some of the AWS keys found in the analyzed Android apps had full privileges that allowed creating and deleting instances, the Fallible researchers said in a blog post.

A new study performed by cybersecurity firm Fallible on 16,000 Android applications revealed that around 2,500 had keys and access tokens for third-party services hard-coded into them.