article thumbnail

Thomson Reuters collected and leaked at least 3TB of sensitive data

Security Affairs

“ElasticSearch is a very common and widely used data storage and is prone to misconfigurations, which makes it accessible to anyone. This instance left sensitive data open and was already indexed via popular IoT [internet of things] search engines. Cases like these raise questions about corporate data collection practices.

IoT 116
article thumbnail

Too much UPnP-enabled connected devices still vulnerable to cyber attacks

Security Affairs

. “The hackers behind it reportedly took advantage of poorly configured routers that had the Universal Plug and Play (UPnP) service enabled, which caused the routers to forward public ports to the private devices and be open to the public internet,” reads the analysis published by Yang.

article thumbnail

‘Unpacking’ technical attribution and challenges for ensuring stability in cyberspace

SecureList

within network activity logs collected by the Internet Service Provider (ISP), etc.). Below are some examples of the type of data collected and strategies of collection and analysis during the technical attribution process. What are the difficulties, uncertainties and limitations of technical attribution?