PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Inside American Express India cloud storage exposure

hackenproof.com | blog | #cloud | #cloud-security | #data-exposure | #shodan | #mongodb | #incident | #american-express
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How a researcher found an unprotected MongoDB tied to American Express India via Shodan and BinaryEdge, exposing 689,272 plaintext customer records and 2.3M encrypted ones before Amex secured it.
Published
Collected

Related coverage

blog · hackenproof.com
ESET South Africa security lapse
A security lapse report: an unprotected 50GB MongoDB instance that appeared to be part of ESET's cloud infrastructure was indexed by Shodan and exposed for anyone to view, access and edit.
blog · hunt.io
Over 68 GB of Philippine Overseas-Employment Database Backups Copied From an Exposed Staging Server
An exposed staging server at UpCloud revealed a completed 68 GB copy of 27 Philippine overseas-employment database backups, a rebranded GodPotato privilege escalation tool, and the operator's own transfer logs.
blog · wiz.io
Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.
blog · wiz.io
Hacking Moltbook: The AI Social Network Any Human Can Control
Wiz Research found a misconfigured Moltbook Supabase database granting full read/write: 1.5M API tokens, 35,000 emails, private agent messages — enough to take over AI agents on the platform.
blog · netlas.io
I Analysed Over 3 Million Exposed Databases Using Netlas
An analysis of 3.2 million exposed databases across MongoDB, MySQL, Oracle, PostgreSQL, MSSQL and Elasticsearch: how many lack authentication, where they cluster, and exposure trends.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
Back