Grok app builder left 35,578 apps open, leaking business data
Claroc found ICU records, employee rosters, and plain-text passwords in apps that opened with no sign-in.
Stories per day · 30 days
Relateddata-exposure4data-breach3digicert3certificate-authority2credentials2identity-documents2amazon-s31apache-kylin1app-builder1azure-blob1cisa1cloud-security1cloud-storage1cnapp1cspm1cve-2026-1088331default-settings1esxi1
23 stories, newest first · one card per story
Stories tagged #misconfiguration
DigiCert breach exposes archived customer data and identity documents
An unauthorized account read archived records from June 27 to July 2, 2026, after a 2025 migration left an internal system online.
2
ESXi and Proxmox ransomware cases from misconfigured credentials
Attackers compromised hypervisors via monitoring tools and reused root passwords without VM escapes.
Pen tester says tobacco firm left recipes on an open file share
The share allowed anonymous SMB access to every employee; the company denied the recipes were real, then the files disappeared.
Ransomnews counts 484,142 listable cloud buckets holding 18 billion files
An October 7 snapshot found 321,058 credential and key files without opening any objects, and the authors say many buckets are public on purpose.
2
CISA’s ScubaGear and ScubaGoggles check cloud security settings
The existing SCuBA tools report configuration gaps in Microsoft 365 and Google Workspace but do not change tenant settings.
SANS survey finds cloud security maturity lagging widespread adoption
Of 400 professionals surveyed, 93% run production cloud workloads, but only 40% call their strategy advanced.
1
CVE-2026-108833: Apache Kylin: default startup profile miss security settings
Apache Kylin’s default startup profile omits security settings in versions 4.0.0 through 5.0.4.
Vibetech Database Exposes 13.7M Records Including Assortment of Old Breaches
An unsecured Vibetech database exposed 13.7 million records, including credentials and data from older breaches.
4
Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals
Datadog found over 3,500 dangerous RBAC grants to Kubernetes built-in principals across 65,000 clusters.
7
Misconfigured Supabase apps expose data in over 16,000 databases
UpGuard found over 16,000 misconfigured Supabase databases exposing PII, passwords, tokens, and some payment data.
3
Some Supabase customers are publicly exposing reams of people’s data to the web
UpGuard found about 16,000 Supabase databases publicly exposing customers’ sensitive personal data.
Some Supabase customers are publicly exposing reams of people’s data to the web
UpGuard found about 16,000 Supabase databases publicly exposing personal data, including passwords and contact details.
2
Government contractor exposed path to immigration records
Contractor firewall change exposed a classified server holding 50 million immigration records to thousands of VPN users until a researcher's demo forced rollback.
1
How One Kubernetes YAML Can Hand Over a GCP Organization
A design flaw in Google's Kubernetes Config Connector allows attackers with namespace access to take over an entire GCP organization using a single YAML file.
7
Test environment let anyone access live customer data
A security audit found an internet-exposed staging environment connected to live customer data, lacking production-grade authentication and access controls.
2
Surfshark VPN says hackers breached internal testing, proxy servers
Surfshark disclosed that hackers accessed misconfigured internal test and proxy servers, exposing build credentials but not customer data, VPN traffic, or production infrastructure.
2
220 million traveler records exposed in Vietnam-linked APIS leak
Vietnam-linked APIS Elasticsearch leak exposed 220 million passenger and crew records with passport numbers and flight details spanning 2017 to 2026.
Your Cloud Security Checklist Doesn't Work the Way You Think It Does
Intruder's 2026 Cloud Security Index found misconfiguration risk profiles differ sharply across AWS, Azure, and Google Cloud across 3,000 organizations.
AI girlfriend review site's secrets were exposed to the world for three weeks
An AI girlfriend review site left secrets exposed to the public internet for roughly three weeks via unprotected testing and staging environments.
Weak IAM affects up to 98% of cloud environments
Intruder's 2026 Cloud Security Index finds weak IAM controls affect up to 98% of cloud environments across AWS, Azure, and Google Cloud.
Education Under Attack: The Pattern Behind Recent University Breaches
Huntress finds four recent university breaches share one root cause, security misconfigurations, and outlines fixes for higher education.
1
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months
Reco tracks City-Forum, an actor abusing Salesforce and ServiceNow guest-user access from one IP for 17 months to enumerate portal data.
2