Threats tagged 'exposed'

ShadowLeak Exploit Exposed Gmail Data Through ChatGPT Deep Search Agent Source: https://hackread.com/shadowleak-exploit-exposed-gmail-data-chatgpt-agent/

Hackers hide behind Tor in exposed Docker API breaches Source: https://www.bleepingcomputer.com/news/security/hackers-hide-behind-tor-in-exposed-docker-api-breaches/

Breach#infosecnews#redditGermany+5

New Docker Malware Strain Spotted Blocking Rivals on Exposed APIs Source: https://hackread.com/new-docker-malware-blocking-rivals-exposed-apis/

Malware#infosecnews#redditGermany+5

Nearly 1 Million Health Records and SSNs Exposed in Marijuana Patient Database Source: https://hackread.com/ssns-health-records-exposed-marijuana-patient-database/

Breach#infosecnews#redditGermany+5

How Exposed TeslaMate Instances Leak Sensitive Tesla Data Source: https://s3yfullah.medium.com/how-exposed-teslamate-instances-leak-sensitive-tesla-data-80bedd123166

Breach#netsec#redditGermany+6

Hacker Accesses Millions of IMDataCenter Records from Exposed AWS Bucket Source: https://hackread.com/hacker-accesses-imdatacenter-records-exposed-aws-bucket/

Breach#infosecnews#redditGermany+5

Can you review my new security testing tool [https://github.com/MohamedKarrab/odoomap](https://github.com/MohamedKarrab/odoomap) Features: • Detect Odoo version & exposed metadata • Enumerate databases and accessible models • Authenticate & verify CRUD permissions per model • Extract data from chosen models (e.g.res.users, res.partner) • Brute-force login credentials (default, custom user/pass, wordlists) • Brute-force internal model names when listing fails

Breach#netsec#redditGermany+7

Just published a new write-up where I walk through how a small HTTP method misconfiguration led to admin credentials being exposed. It's a simple but impactful example of why misconfigurations matter. 📖 Read it here: [https://is4curity.medium.com/admin-emails-passwords-exposed-via-http-method-change-da23186f37d3](https://is4curity.medium.com/admin-emails-passwords-exposed-via-http-method-change-da23186f37d3) Let me know what you think — and feel free to share similar cases! \#bugbounty #infosec #pentest #writeup #websecurity

Breach#netsec#redditGermany+9

Global Fashion Label SABO’s 3.5 Million Customer Records Exposed Online Source: https://hackread.com/global-fashion-label-sabo-customer-records-leaked/

Breach#infosecnews#redditGermany+7

Server with Rockerbox Tax Firm Data Exposed 286GB of PII Records Source: https://hackread.com/rockerbox-server-tax-firm-exposed-sensitive-records/

Breach#infosecnews#redditGermany+7

A flaw in Catwatchful spyware exposed logins of +62,000 users Source: https://securityaffairs.com/179620/malware/a-flaw-in-catwatchful-spyware-exposed-logins-of-62000-users.html

Malware#infosecnews#redditGermany+7

AgentSmith Flaw in LangSmith's Prompt Hub Exposed User API Keys, Data Source: https://hackread.com/agentsmith-flaw-langsmith-prompt-hub-api-keys-data/

Breach#infosecnews#redditGermany+6

Asana warns MCP AI feature exposed customer data to other orgs Source: https://www.bleepingcomputer.com/news/security/asana-warns-mcp-ai-feature-exposed-customer-data-to-other-orgs/

Breach#infosecnews#redditGermany+7

Over a Third of Grafana Instances Exposed to XSS Flaw Source: https://www.infosecurity-magazine.com/news/over-third-grafana-instances/

Breach#infosecnews#redditGermany+8

Exposed eyes: 40,000 security cameras vulnerable to remote hacking Source: https://securityaffairs.com/178908/iot/40000-security-cameras-remote-hacking.html

Breach#infosecnews#redditGermany+7

Limited Canva Creator Data Exposed Via Russia AI Chatbot Database Source: https://hackread.com/limited-canva-creator-data-expose-ai-chatbot-database/

Breach#infosecnews#redditGermany+6