article thumbnail

Thomson Reuters collected and leaked at least 3TB of sensitive data

Security Affairs

“ElasticSearch is a very common and widely used data storage and is prone to misconfigurations, which makes it accessible to anyone. This instance left sensitive data open and was already indexed via popular IoT [internet of things] search engines. Cases like these raise questions about corporate data collection practices.

IoT 116
article thumbnail

Too much UPnP-enabled connected devices still vulnerable to cyber attacks

Security Affairs

In early 2013, researchers at Rapid7 published an interesting whitepaper entitled “Security Flaws in Universal Plug and Play” that evaluated the global exposure of UPnP-enabled network devices. In December 2018 the company provided an update to its initial analysis revealing a disconcerting scenario, UPnProxy is still up and running.