1.CVE-2026-84636: Apple iOS/macOS SCDynamicStore Wi-Fi SSID Info Disclosure PoCvulnerability | Medium | 2026-10-27 11:20 | CVE-2026-84636 | github.com | Original ↗ | .md | #data-exposure | #github | #red-team
2.Over 68 GB of Philippine Overseas-Employment Database Backups Copied From an Exposed Staging Serverblog | 2026-10-28 00:00 | hunt.io | Original ↗ | .md | #cloud-security | #data-exposure | #privilege-escalation
3.How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEsvulnerability | 2026-10-20 07:48 | yeswehack.com | Original ↗ | .md | #data-exposure | #xss | #idor
4.How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)blog | 2026-10-07 14:53 | wiz.io | Original ↗ | .md | #ai-security | #attack-surface | #data-exposure
5.Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chainblog | 2026-08-13 13:48 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #appsec
6.CSS:the bomb inside your inboxresearch | 2026-08-06 22:00 | portswigger.net | Original ↗ | .md | #ai-security | #browser-security | #data-exposure
7.CVE-2026-17543 PoC: PHP ext-pgsql SQL injection via backslash breakouttool | 2026-08-06 17:05 | CVE-2026-17543 | github.com | Original ↗ | .md | #public-poc | #data-exposure | #php
8.Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for yearsblog | 2026-08-04 14:45 | portswigger.net | Original ↗ | .md | #ai-security | #pentesting | #agentic-ai
9.Introducing snowpick: Testing ServiceNow for Public Data Exposureblog | 2026-07-20 00:00 | bishopfox.com | Original ↗ | .md | #data-exposure | #security-tool | #servicenow
10.What is DSPM and how does it work?blog | 2026-07-20 00:00 | aikido.dev | Original ↗ | .md | #cloud-security | #appsec | #devsecops
11.The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL APIblog | 2026-06-29 09:31 | wiz.io | Original ↗ | .md | #data-exposure | #api-security | #graphql
12.Chinese-speaking Operators Clone FIFA's World Cup 2026 Ticketing Site To Steal Fan Logins and Card Datablog | 2026-06-17 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #credential-theft | #data-exposure
13.ESET South Africa security lapseblog | 2026-06-16 16:34 | hackenproof.com | Original ↗ | .md | #cloud | #cloud-security | #data-exposure
14.Inside American Express India cloud storage exposureblog | 2026-06-16 16:25 | hackenproof.com | Original ↗ | .md | #cloud | #cloud-security | #data-exposure
15.Ababil of Minab Exposed: LA Metro SCADA Backups and Israeli Victim Data Left Open on an Iranian Staging Serverblog | 2026-06-15 00:00 | hunt.io | Original ↗ | .md | #incident-response | #threat-intelligence | #data-exposure
16.How I dumped users’ passports from the exchangeblog | 2026-06-11 10:25 | hackenproof.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #data-exposure
17.CVE-2026-48827 — Apache MINA SSHD sshd-git Path Traversal Info Disclosureresearch | 2026-06-01 00:00 | CVE-2026-48827 | aretiq.ai | Original ↗ | .md | #git | #vulnerability-research | #data-exposure
18.Breaking Tenant Boundaries, When Path Traversal Isn't About the Filesystemblog | 2026-05-26 12:45 | labs.cognisys.group | Original ↗ | .md | #data-exposure | #path-traversal | #saas
19.Discovering Data Exposure with Netlasblog | 2026-05-21 00:00 | netlas.io | Original ↗ | .md | #data-exposure | #osint | #owasp
20.CVE-2025-32975: The Open Directory Behind the KACE SMA Breach and 60+ Downstream Victimsincident | 2026-05-12 00:00 | CVE-2025-32975 | hunt.io | Original ↗ | .md | #incident-response | #threat-intelligence | #authentication-bypass
21.Five challenges to security for SaaS companiesblog | 2026-05-12 12:00 | bugcrowd.com | Original ↗ | .md | #cloud-security | #attack-surface | #compliance
22.Iranian-Nexus Operation Against Oman's Government: 12 Ministries Hit and 26,000 Citizen Records Exposedblog | 2026-05-05 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #data-exposure | #espionage
23.Mitigating URL-based Exfiltration in Geminiblog | 2026-03-09 00:00 | bughunters.google.com | Original ↗ | .md | #ai-security | #agentic-ai | #data-exposure
24.Hacking Moltbook: The AI Social Network Any Human Can Controlblog | 2026-02-02 15:00 | wiz.io | Original ↗ | .md | #ai-security | #data-exposure | #ai-agents
25.Hacking An AI Children's Toy: Remote Access to Every Conversationblog | 2026-01-29 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #data-exposure | #iot
26.The State of Digital Exposure to Cybercrime for European Retailblog | 2026-01-28 00:00 | ethiack.com | Original ↗ | .md | #vulnerability-management | #attack-surface | #data-exposure
27.Lack of isolation in agentic browsers resurfaces old vulnerabilitiesblog | 2026-01-13 12:00 | blog.trailofbits.com | Original ↗ | .md | #agentic-ai | #browser-security | #data-exposure
28.Dumpster Diving for Dataincident | 2026-01-06 14:00 | projectblack.io | Original ↗ | .md | #data-exposure | #privacy | #disk-encryption
29.Takeaways from the biggest sensitive data exposure breachesblog | 2025-10-17 12:00 | bugcrowd.com | Original ↗ | .md | #data-exposure | #mfa | #snowflake
30.API Security Testing: The Overlooked Frontline in Application Penetration Testingblog | 2025-10-14 00:00 | netspi.com | Original ↗ | .md | #pentesting | #data-exposure | #api-security