It was reported over the weekend that breaches occurred in five dating apps, leaking PI on more than 1 million users, attributed to misconfigurations of various servers: Amazon buckets, ElasticSearch, and MongoDB.
Experts Comments
ElasticSearch databases are probably the primary sources of data leaks, because of misconfigurations when set up.
ElasticSearch databases are probably the primary sources of data leaks, because of misconfigurations when set up. For example, the front end UI is often secured with authentication, but admins forget that the default port 9200 is also visible and accessible online, meaning that unprotected ElasticSearch databases can leak data via the backdoor. Having built the database, the developers probably forgot all about patching it, focusing on the front end’s ease-of-use to drive user engagement and.....Read More
Like(Dot Your Expert Comments
Only for registered and approved experts. Please register before providing comments. Register here
Linkedin Message
@Casey Kraus, President of Cloud Security Management Provider, provides expert commentary for "dot your expert comments" at @Information Security Buzz.
"There is always a shared responsibility for security between the cloud provider and the company...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/personal-details-of-1m-dating-app-customers-leaked-security-expert-comments
Facebook Message
@Casey Kraus, President of Cloud Security Management Provider, provides expert commentary for "dot your expert comments" at @Information Security Buzz.
"There is always a shared responsibility for security between the cloud provider and the company...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/personal-details-of-1m-dating-app-customers-leaked-security-expert-comments