#dataexposure — Public Fediverse posts

CareCloud says one EHR environment hit in New Jersey #CareCloud #EHR #UnauthorizedAccess #NewJersey #SEC #DataExposure https://dysruptionhub.com/carecloud-ehr-outage-new-jersey/

CareCloud says one EHR environment hit in New Jersey #CareCloud #EHR #UnauthorizedAccess #NewJersey #SEC #DataExposure https://dysruptionhub.com/carecloud-ehr-outage-new-jersey/

Incident summary:
Target: PayPal - Working Capital (PPWC) loan app
Root cause: Software code error
Exposure window: July 1- Dec 13, 2025
Discovery: Dec 12, 2025
Scope: ~100 users

Data exposed:
• SSN
• DOB
• Contact & business details

No core system compromise reported.
Unauthorized transactions observed in limited cases.

Credit monitoring via Equifax provided.
Key considerations:

– Secure SDLC gaps?
– Change management review failure?
– Logging & anomaly detection delay?
– Exposure vs intrusion classification challenges

Six months of unnoticed PII exposure highlights how application-layer misconfigurations can rival full breaches in impact.

How would you design detection controls to catch this earlier?

Engage below.
Follow @technadu for technical cybersecurity coverage.

Source: https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/

#ThreatAnalysis #SecureSDLC #FintechSecurity #ApplicationSecurity #DataExposure #CyberRisk #DFIR #Governance #Infosec

Incident summary:
Target: PayPal - Working Capital (PPWC) loan app
Root cause: Software code error
Exposure window: July 1- Dec 13, 2025
Discovery: Dec 12, 2025
Scope: ~100 users

Data exposed:
• SSN
• DOB
• Contact & business details

No core system compromise reported.
Unauthorized transactions observed in limited cases.

Credit monitoring via Equifax provided.
Key considerations:

– Secure SDLC gaps?
– Change management review failure?
– Logging & anomaly detection delay?
– Exposure vs intrusion classification challenges

Six months of unnoticed PII exposure highlights how application-layer misconfigurations can rival full breaches in impact.

How would you design detection controls to catch this earlier?

Engage below.
Follow @technadu for technical cybersecurity coverage.

Source: https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/

#ThreatAnalysis #SecureSDLC #FintechSecurity #ApplicationSecurity #DataExposure #CyberRisk #DFIR #Governance #Infosec

Incident summary:
Target: PayPal - Working Capital (PPWC) loan app
Root cause: Software code error
Exposure window: July 1- Dec 13, 2025
Discovery: Dec 12, 2025
Scope: ~100 users

Data exposed:
• SSN
• DOB
• Contact & business details

No core system compromise reported.
Unauthorized transactions observed in limited cases.

Credit monitoring via Equifax provided.
Key considerations:

– Secure SDLC gaps?
– Change management review failure?
– Logging & anomaly detection delay?
– Exposure vs intrusion classification challenges

Six months of unnoticed PII exposure highlights how application-layer misconfigurations can rival full breaches in impact.

How would you design detection controls to catch this earlier?

Engage below.
Follow @technadu for technical cybersecurity coverage.

Source: https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/

#ThreatAnalysis #SecureSDLC #FintechSecurity #ApplicationSecurity #DataExposure #CyberRisk #DFIR #Governance #Infosec

Incident summary:
Target: PayPal - Working Capital (PPWC) loan app
Root cause: Software code error
Exposure window: July 1- Dec 13, 2025
Discovery: Dec 12, 2025
Scope: ~100 users

Data exposed:
• SSN
• DOB
• Contact & business details

No core system compromise reported.
Unauthorized transactions observed in limited cases.

Credit monitoring via Equifax provided.
Key considerations:

– Secure SDLC gaps?
– Change management review failure?
– Logging & anomaly detection delay?
– Exposure vs intrusion classification challenges

Six months of unnoticed PII exposure highlights how application-layer misconfigurations can rival full breaches in impact.

How would you design detection controls to catch this earlier?

Engage below.
Follow @technadu for technical cybersecurity coverage.

Source: https://www.bleepingcomputer.com/news/security/paypal-discloses-data-breach-exposing-users-personal-information/

#ThreatAnalysis #SecureSDLC #FintechSecurity #ApplicationSecurity #DataExposure #CyberRisk #DFIR #Governance #Infosec

Two billion email addresses were exposed

https://www.troyhunt.com/2-billion-email-addresses-were-exposed-and-we-indexed-them-all-in-have-i-been-pwned/

#HackerNews #emailbreach #dataexposure #cybersecurity #privacy #awareness

4TB and no client or personal data eh? 👏🏻

https://infosec.exchange/@technadu/115475109972392589 - A 4TB SQL Server backup tied to EY was exposed on Microsoft Azure, discovered by Neo Security during an asset mapping scan.

EY remediated promptly, confirming no client or personal data was affected.

#CyberSecurity #EY #DataExposure #Azure #Infosec #ThreatIntel #DataProtection #CloudSecurity

A 4TB SQL Server backup tied to EY was exposed on Microsoft Azure, discovered by Neo Security during an asset mapping scan.

The file’s naming pattern and metadata indicated it was a full unencrypted database dump - a critical visibility gap in cloud storage hygiene.

EY remediated promptly, confirming no client or personal data was affected.

As botnets continuously scan public cloud assets, how can enterprises proactively detect these exposures before attackers do?

💬 Join the discussion & follow @technadu for deeper security intelligence.

#CyberSecurity #EY #DataExposure #Azure #Infosec #ThreatIntel #DataProtection #CloudSecurity

McDonald’s Data Exposed in Third-Party Partner Breach https://dailydarkweb.net/mcdonalds-data-exposed-in-third-party-partner-breach/ #supplychainattack #thirdpartybreach #CyberSecurity #DataBreaches #dataexposure #UnitedStates #McDonalds #dataleak #McD

Flaws in Software Used by Hundreds of Cities and Towns Exposed Sensitive Data – Source: www.securityweek.com https://ciso2ciso.com/flaws-in-software-used-by-hundreds-of-cities-and-towns-exposed-sensitive-data-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #Vulnerability #DataExposure #securityweek #Workhorse

Flaws in Software Used by Hundreds of Cities and Towns Exposed Sensitive Data https://www.securityweek.com/flaws-in-software-used-by-hundreds-of-cities-and-towns-exposed-sensitive-data/ #Vulnerabilities #vulnerability #DataExposure #Workhorse

Flaws in Software Used by Hundreds of Cities and Towns Exposed Sensitive Data https://www.securityweek.com/flaws-in-software-used-by-hundreds-of-cities-and-towns-exposed-sensitive-data/ #Vulnerabilities #vulnerability #DataExposure #Workhorse

Alleged Data Exposure Hits Indonesian Supreme Court https://dailydarkweb.net/alleged-data-exposure-hits-indonesian-supreme-court/ #DarkWebNews&Services #MAHKAMAHAGUNGGOID #governmentdata #CyberSecurity #MAHKAMAHAGUNG #dataexposure #SupremeCourt #databreach #Indonesia

Alleged Breach of Everest Bank Customer Database https://dailydarkweb.net/alleged-breach-of-everest-bank-customer-database/ #PersonalInformation #BankingSecurity #CyberSecurity #DataBreaches #customerdata #dataexposure #EverestBank #databreach #India

In a penetration test, automated tools find known vulnerabilities—but they don’t think like an attacker...
 
You can absolutely automate the 'vulnerability assessment' phase and information discovery.

It’s possible to automate some exploitation too, if you’re brave and don’t care about the stability of the customer’s network.
 
However, humans perform penetration testing.

Here's a story that illustrates why: https://www.pentestpartners.com/security-blog/a-tale-of-enumeration-and-why-pen-testing-cant-be-automated/

#CyberSecurity #PenTesting #EthicalHacking #OSINT #DataExposure #InfoSec #AutomatedTesting #InfrastructureSecurity

Signal under fire for storing encryption keys in plaintext

https://stackdiary.com/signal-under-fire-for-storing-encryption-keys-in-plaintext/

#Signal #Privacy #Encryption #Cybersecurity #Messaging #DataProtection #SecureComms #DesktopApp #Vulnerability #InfoSec #DigitalSecurity #EndToEnd #PlainText #KeyManagement #TechNews #PrivacyBreach #SecurityAlert #Cryptography #DataSafety #MobileApps #UserPrivacy #SecurityFlaw #EncryptionKeys #Tech #MessageSecurity #PrivacyRisk #SecureMessaging #CyberRisk #DataExposure

Potential personal data exposure on LHDN’s payment portal #cybersecurity #databreach #dataexposure #dataprotection #digitallife #featured #inlandrevenueboard #irb #lhdn #news #security

https://soyacincau.com/2023/12/13/lhdn-irb-data-exposure-payment-portal-slip/