Research by security firm Eclypsium shows that vacated cloud servers are not properly wiped by hosting providers and may be used as an intrusion channel by bad actors.