aaronwp

7 ms·

1. 1.▲
   by aaronwp 3y ago

   Another S3 breach, same as all the rest, except this time it risked a ton of crypto assets
2. 2.▲
   Huobi's Leaky Bucket Risked Crypto Breach(phillips.technology)

   1 points by aaronwp 3y ago|1 comments
3. 3.▲
   Tripvalet.com Leaks Passwords and Stripe Credentials(phillips.technology)

   3 points by aaronwp 3y ago|1 comments
4. 4.▲
   by aaronwp 3y ago

   This is the first Stripe breach I've found where the vendor didn't even bother to set a host password. All of their money was at risk. It's a good thing I'm so handsome and honest. They also leaked a bunch of plaintext p
5. 5.▲
   by aaronwp 5y ago

   stay tuned
6. 6.▲
   by aaronwp 5y ago

   Yes, if PII is involved it's common to run an audit like this. In addition to the access keys on the server image, Sega also accidentally published a database export containing PII. In order to write a comprehensive disclosure I have t
7. 7.▲
   by aaronwp 5y ago

   Sega Europe left AWS S3 creds laying around in a server image on downloads.sega.com. I was able to use them to enumerate a bunch of storage, dig out more keys, and mock up a spear phishing attack against the Football Manager forums. All the
8. 8.▲
   Sega Europe suffers major security breach(vpnoverview.com)

   185 points by aaronwp 5y ago|103 comments
9. 9.▲
   by aaronwp 7y ago

   if anything my terrible merges usually detract from it
10. 10.▲
    Serious vulnerabilities discovered in VIPRE and BullGuard mobile antivirus(comparitech.com)

    1 points by aaronwp 7y ago|0 comments