This is the story of how mapping and analysis of an open elastic search led to the discovery of a misconfigured Amazon s3 bucket that exposed data from hundreds of thousands of dental patients. If you live in Brazil, you may already be experiencing breach fatigue from having had so much of your personal and…
Author: Lee J
What NOT to do when researchers notify you of a breach
This story is going to be straight up, forward and simple. What not to do when a researcher like myself contacts you about a security incident. Every day all around the world researchers are being ignored by those who they attempt to help out. Recently another researcher discovered a open s3 bucket that belong to…
Aerospace corp Elbit Systems Breached, 10,000 accounts leaked
Israel is no stranger to cyber incidents and today a user on twitter has posted over 10,000 accounts from a aerospace and defense corporation Elbit Systems. The leak was announced by @Th3Falcon earlier today and was posted to privatebin.net with over 10,000 credentials for users and administors from elbit systems. Data in the leak contains…
Forum post claims breach of 850k military based job seekers from recruitmilitary.com
Today a user has posted a new thread to a known forum that makes claim of an breach of over 850,000 US military officers personal information. The user who goes by the name booloop has also stated that they was given it by an anonymous source earlier this year, has not stated where it came…
Australia Zoo Breached
Australia Zoo, home of the croc hunter otherwise known as Steve Irwin is one of Queensland’s leading tourist attractions. It also attracted the attention of a pentester who has provided CyberWarNews with evidence that the main website for the zoo has been compromised. The pentester, a Pakistani penetration tester named Touseef Gul, has previously made…
Another day and Another Bulk Breach Dump Totaling over 3.4 Billion Credentials.
Reshared, Recycled, Swapped and Sold breach data is being a common thing and well once again someone has complied a bunch of public and not so public combo lists from well known previous breaches that when combined have a total of 3,443,684,697 Emails with 2,914,838,915 of them being unique leaving only about 333K duplicate entries….