TLDR InfoSec · ATTACKS & VULNERABILITIES
U.S. INTERNET LEAKED YEARS OF INTERNAL, CUSTOMER EMAILS
Summary from the TLDR InfoSec newsletter
U.S. Internet’s 'Securence' email-providing division had a publicly exposed webpage that listed every email of its 6,500 clients. The CEO of the company stated that the exposure was caused by a mistake in an Ansible playbook controlling the nginx config. U.S. Internet has not commented on how long this misconfiguration was in place or why appropriate controls were not in place to detect or prevent the misconfiguration.